ASB-A-527038421

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-527038421.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-527038421
Aliases
  • A-527038421
  • CVE-2026-58979
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T16:56:25Z
Summary
[none]
Details

In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/3b4aad43843d0b10d4cdedcd6905b4b8b5ea0607"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "249309817643782379465478961047643927765",
                    "223521962881983595675711839722904548260",
                    "19678127559003501492536837222623819979",
                    "78229633562349872921851902069702094313",
                    "279916090211245221095979722016736977644",
                    "206838325010810148846526824119169754973",
                    "118939009967577808194298079904015945161",
                    "105135349804760838859480469610730392589",
                    "277167926992506182066285464212271669244",
                    "239023834931436034751817181904137659087"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-527038421-0906bc21",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/3b4aad43843d0b10d4cdedcd6905b4b8b5ea0607",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/PresentationController.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "40243082470080854787806834916895024560",
                "length":  1300
            },
            "id":  "ASB-A-527038421-99c1eaee",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/3b4aad43843d0b10d4cdedcd6905b4b8b5ea0607",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/PresentationController.java",
                "function":  "canPresent"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-527038421.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/ec88ac8e2fc5a67d745907f0bb8d27cc5ceac6b7"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "EoP"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "179926471240828294546952046396406015179",
                "length":  1088
            },
            "id":  "ASB-A-527038421-0a1041ed",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ec88ac8e2fc5a67d745907f0bb8d27cc5ceac6b7",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/PresentationController.java",
                "function":  "canPresent"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "249309817643782379465478961047643927765",
                    "223521962881983595675711839722904548260",
                    "155372890749952331468941875267420036444",
                    "238059584153962421690127047454601774012",
                    "155907099151401795935103625087990243997",
                    "49037834033598096853251754760236272046",
                    "105135349804760838859480469610730392589",
                    "277167926992506182066285464212271669244",
                    "239023834931436034751817181904137659087"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-527038421-7bd967db",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ec88ac8e2fc5a67d745907f0bb8d27cc5ceac6b7",
            "target":  {
                "file":  "services/core/java/com/android/server/wm/PresentationController.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-527038421.json"