ASB-A-525133623

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-525133623.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-525133623
Aliases
  • A-525133623
  • CVE-2026-58837
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:19Z
Summary
[none]
Details

In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/32919fe0590ae6dab8e16a9af4fa75b718089eb2",
        "https://android.googlesource.com/platform/frameworks/base/+/84f2a62a6059116949597baa9f17226b8c996bf3",
        "https://android.googlesource.com/platform/frameworks/base/+/59d9f7b361c4bc7af2bec3dd6730a212dae89bc8"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "255156781201081225281859411603687717092",
                    "293070987469983026754223518943974456879",
                    "236473211968419380036099613244031547464",
                    "308040606055537248334691826648939412914",
                    "189840225009124958682423299511710245059",
                    "99253844324105750832328122535284829500",
                    "176993688453419779652937881466580784893",
                    "118787928366390060394002057044021199941",
                    "285688557680339939245191869683462369461",
                    "34975149383398808578892052138750963925",
                    "239297346265700406582464567790896056868",
                    "329714276799701309232429106497211853848",
                    "236910305148198124982805683904494209093",
                    "17412476527129308768591112579098934525",
                    "247884442122427535215246291244743870718",
                    "297419764752476220762748647658565150574",
                    "254322072292453387950256988307252522684",
                    "5098574227328947469600347928874499715",
                    "205146513068116257240054971646804267288"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-525133623-256871e3",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/32919fe0590ae6dab8e16a9af4fa75b718089eb2",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "207929354715145024680966856235153426049",
                "length":  674
            },
            "id":  "ASB-A-525133623-604b9b7f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/32919fe0590ae6dab8e16a9af4fa75b718089eb2",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function":  "associate"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "322212632678466247116401215485355889299",
                "length":  1235
            },
            "id":  "ASB-A-525133623-778d9bee",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/84f2a62a6059116949597baa9f17226b8c996bf3",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function":  "associate"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "88097795025190906598419229617024522463",
                    "205136204361005634286915637054227791528",
                    "103288127626041577198270278362176333206",
                    "52665934682436694898665501987200778068",
                    "25699583441627174877978878456555234235",
                    "105826114046037305035978579635500210657",
                    "181083594407065548247723782316228398183",
                    "205487136278303960357644611506064067795",
                    "98310130469283987562261388978648755122",
                    "257193650944862988170818522074947997428",
                    "52467946730781958153216541048215941512",
                    "80348255877217338548350974936912624741",
                    "251939309453932992910797904107522251274",
                    "3955931896430825694984091434313537336",
                    "184221937480058465391464904948738319936",
                    "73693591890026691809236900550370277014",
                    "192518439122396214295498939487556502912",
                    "4338369658882217085758492973669655523"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-525133623-976c68c7",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/84f2a62a6059116949597baa9f17226b8c996bf3",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "258761508731383338062245540982726913469",
                    "66624188022379625068501346226040845899",
                    "324398164463981134670368329703281555186",
                    "294334225619865601991780228733152045900",
                    "96135752743110172549510905654940698603",
                    "229086868884248565292437370547018229698",
                    "197664765353177713067384837741191421135",
                    "165620453168173442316981697178505114276",
                    "304957425510180507133218060659657714597"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-525133623-b4c78f3f",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/59d9f7b361c4bc7af2bec3dd6730a212dae89bc8",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/BackgroundActivityStartController.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/35c87b62ed11c7ae4138680f0fc3e5c025e5742e"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "51287810560462348188484537280553425043",
                "length":  351
            },
            "id":  "ASB-A-525133623-12915154",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/35c87b62ed11c7ae4138680f0fc3e5c025e5742e",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function":  "associate"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "168877967087863053870882480064379440127",
                    "236578004079345091192294599369112989513",
                    "191971767302067486367683118839563872675"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-525133623-8f4890cf",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/35c87b62ed11c7ae4138680f0fc3e5c025e5742e",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/9d225e2295caac3ac1a12b9c9a4cc4982dc95ad0"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "29068247425018024254182592741349855385",
                "length":  596
            },
            "id":  "ASB-A-525133623-1f14c04a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9d225e2295caac3ac1a12b9c9a4cc4982dc95ad0",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function":  "associate"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "73114256134889800685881944478806072288",
                    "5098574227328947469600347928874499715",
                    "205146513068116257240054971646804267288"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-525133623-3704a413",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9d225e2295caac3ac1a12b9c9a4cc4982dc95ad0",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/6e28696098cd74cb53b5b155bcef0ee0421fd6d0"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "73114256134889800685881944478806072288",
                    "5098574227328947469600347928874499715",
                    "205146513068116257240054971646804267288"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-525133623-440da5fd",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/6e28696098cd74cb53b5b155bcef0ee0421fd6d0",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "29068247425018024254182592741349855385",
                "length":  596
            },
            "id":  "ASB-A-525133623-9b074b00",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/6e28696098cd74cb53b5b155bcef0ee0421fd6d0",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function":  "associate"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/312601eb27381c22aca7fb67a5b2a238e84645f2"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "207929354715145024680966856235153426049",
                "length":  674
            },
            "id":  "ASB-A-525133623-72a381fd",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/312601eb27381c22aca7fb67a5b2a238e84645f2",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function":  "associate"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "254322072292453387950256988307252522684",
                    "5098574227328947469600347928874499715",
                    "205146513068116257240054971646804267288"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-525133623-c85d506a",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/312601eb27381c22aca7fb67a5b2a238e84645f2",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/3667ae22044946a1ac4166969c281f96fd4efdad"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "51287810560462348188484537280553425043",
                "length":  351
            },
            "id":  "ASB-A-525133623-73f6da19",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/3667ae22044946a1ac4166969c281f96fd4efdad",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java",
                "function":  "associate"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "168877967087863053870882480064379440127",
                    "236578004079345091192294599369112989513",
                    "191971767302067486367683118839563872675"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-525133623-886106d2",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/3667ae22044946a1ac4166969c281f96fd4efdad",
            "target":  {
                "file":  "services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"