In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"67512861029338814249349861885314635053",
"290156515777081318189778133334877633745",
"127925059051352371839438547349036061467"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-44412631",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"71387856242766300111474108755639060906",
"245722315977399161983952543873526432790",
"131604536729388262005348928524854859898",
"303055045182444199920398436940678675023",
"120435722638721370935691190501569981545",
"288961117767715855422939441556262966579",
"22997619993064488372263118631628684631",
"247303866414399357566020699537269283774"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-8eb32da8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "101408601063527151196425862634223347783",
"length": 698
},
"id": "ASB-A-515158597-dbd4b16e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
"function": "reapplyAllPoliciesOnBootLocked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "302280238773157148435720193895737547847",
"length": 3292
},
"id": "ASB-A-515158597-e6eea9e8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "setPermissionGrantState"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"71387856242766300111474108755639060906",
"245722315977399161983952543873526432790",
"131604536729388262005348928524854859898",
"182280704221518568893384466448839089670",
"120435722638721370935691190501569981545",
"288961117767715855422939441556262966579",
"22997619993064488372263118631628684631",
"247303866414399357566020699537269283774"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-44f27af2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"67512861029338814249349861885314635053",
"290156515777081318189778133334877633745",
"127925059051352371839438547349036061467"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-5c3291b9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "289882715831773007102488547891573017155",
"length": 715
},
"id": "ASB-A-515158597-7ef18448",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
"function": "reapplyAllPoliciesOnBootLocked"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "185959690768177997466468579407855435738",
"length": 3837
},
"id": "ASB-A-515158597-adc4d87c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "setPermissionGrantState"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"67512861029338814249349861885314635053",
"290156515777081318189778133334877633745",
"127925059051352371839438547349036061467"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-13ed2dc8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "289882715831773007102488547891573017155",
"length": 715
},
"id": "ASB-A-515158597-22cfd78d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
"function": "reapplyAllPoliciesOnBootLocked"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"71387856242766300111474108755639060906",
"245722315977399161983952543873526432790",
"131604536729388262005348928524854859898",
"182280704221518568893384466448839089670",
"120435722638721370935691190501569981545",
"288961117767715855422939441556262966579",
"22997619993064488372263118631628684631",
"247303866414399357566020699537269283774"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-5b7d299b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "286901813323477361416805740705243665528",
"length": 3389
},
"id": "ASB-A-515158597-837489dd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "setPermissionGrantState"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "105530994649535162782177526453052955785",
"length": 3354
},
"id": "ASB-A-515158597-573b3ff7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "setPermissionGrantState"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "101408601063527151196425862634223347783",
"length": 698
},
"id": "ASB-A-515158597-7aebade5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
"function": "reapplyAllPoliciesOnBootLocked"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"67512861029338814249349861885314635053",
"290156515777081318189778133334877633745",
"127925059051352371839438547349036061467"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-813e470e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"71387856242766300111474108755639060906",
"245722315977399161983952543873526432790",
"131604536729388262005348928524854859898",
"303055045182444199920398436940678675023",
"120435722638721370935691190501569981545",
"288961117767715855422939441556262966579",
"22997619993064488372263118631628684631",
"247303866414399357566020699537269283774"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-e81535cb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"67512861029338814249349861885314635053",
"290156515777081318189778133334877633745",
"127925059051352371839438547349036061467"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-7baa0302",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"71387856242766300111474108755639060906",
"245722315977399161983952543873526432790",
"131604536729388262005348928524854859898",
"303055045182444199920398436940678675023",
"120435722638721370935691190501569981545",
"288961117767715855422939441556262966579",
"22997619993064488372263118631628684631",
"247303866414399357566020699537269283774"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-87d388da",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "302280238773157148435720193895737547847",
"length": 3292
},
"id": "ASB-A-515158597-93165793",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "setPermissionGrantState"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "101408601063527151196425862634223347783",
"length": 698
},
"id": "ASB-A-515158597-f4d956bc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
"function": "reapplyAllPoliciesOnBootLocked"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4"
],
"severity": "High",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"99959481176727584204489406590511938161",
"139814659820484636508263181494233403878",
"233905006612110556967474936699273831191",
"15645313722734130202496151787745546194",
"12717694282970908182014466446689603566",
"288961117767715855422939441556262966579",
"22997619993064488372263118631628684631",
"247303866414399357566020699537269283774"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-19a3fcda",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "138360623705418565317349113311700699865",
"length": 651
},
"id": "ASB-A-515158597-369936f0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java",
"function": "reapplyAllPoliciesLocked"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"67512861029338814249349861885314635053",
"290156515777081318189778133334877633745",
"127925059051352371839438547349036061467"
],
"threshold": 0.9
},
"id": "ASB-A-515158597-5d392116",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "181043420025488049292628495150379739863",
"length": 3399
},
"id": "ASB-A-515158597-b8d6f07b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4",
"target": {
"file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
"function": "setPermissionGrantState"
}
}
]
}