{"id":"ASB-A-281543351", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-59008", "A-281543351"], "details":"In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c9c04f595d904aff21ebdd67986b5a9250d6406a"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"211318072260311163843113923133829554985", "length":1420}, "id":"ASB-A-281543351-05987da0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c9c04f595d904aff21ebdd67986b5a9250d6406a", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setApplicationRestrictions"}}, {"deprecated":false, "digest":{"line_hashes":["301498066083663182628863673520228247864", "104997068357892947757237010302939544677", "243363565323553501550817353154413927248", "84731709377475183296577555973772744279", "23031151675285858949427054582207703380", "322476890247886008795765985880236611224", "142036694912208495280016163075122035923", "231651472917796936300567924298911753058", "165720907060463567974881280086468749577", "136145168668719442673160873764216177177", "132831946292049933711304198678708505462", "232124807684297307563293725678044138016", "1693210580421343794575933473723223526", "219591593475994794802162696771360920162", "179331476582465301947662591680083343067", "97835455985896156180627963183863811908", "163128951422547494852641933113485676640", "117184083143677443903774130300134904653"], "threshold":0.9}, "id":"ASB-A-281543351-65f31440", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c9c04f595d904aff21ebdd67986b5a9250d6406a", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f7580c2f8ee95e4f00782ed8c1723fdfa03efc49"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"155380206274187637560359198686814129758", "length":1315}, "id":"ASB-A-281543351-9f2fe952", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f7580c2f8ee95e4f00782ed8c1723fdfa03efc49", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setApplicationRestrictions"}}, {"deprecated":false, "digest":{"line_hashes":["154079091873617040419716932993632036454", "325747374602964068067104091483481064516", "270374063380347850549185748710587946741", "251812851855089251532965546011231901279", "301498066083663182628863673520228247864", "104997068357892947757237010302939544677", "243363565323553501550817353154413927248", "84731709377475183296577555973772744279", "23031151675285858949427054582207703380", "322476890247886008795765985880236611224", "44059932035731310382507253441592859250", "275353170412314842752212700654103826686", "191772039468551958370256811737434370048", "157199174091346150416134507888407439660", "127888332903425331666803852534686701817", "49165030303259782692761457352416831203", "52846591566841198819274449032809410235", "143210234346223914550456868347891703523", "299329960328872765693377645990616110779", "206128379537443019541294379444219462724", "26414224145330728602411073707128744757"], "threshold":0.9}, "id":"ASB-A-281543351-d006747e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f7580c2f8ee95e4f00782ed8c1723fdfa03efc49", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/598eddaabe731afbfb3c9265d36b637a346e5604"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"211318072260311163843113923133829554985", "length":1420}, "id":"ASB-A-281543351-044a1057", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/598eddaabe731afbfb3c9265d36b637a346e5604", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setApplicationRestrictions"}}, {"deprecated":false, "digest":{"line_hashes":["301498066083663182628863673520228247864", "104997068357892947757237010302939544677", "243363565323553501550817353154413927248", "84731709377475183296577555973772744279", "23031151675285858949427054582207703380", "322476890247886008795765985880236611224", "142036694912208495280016163075122035923", "231651472917796936300567924298911753058", "165720907060463567974881280086468749577", "136145168668719442673160873764216177177", "132831946292049933711304198678708505462", "232124807684297307563293725678044138016", "1693210580421343794575933473723223526", "219591593475994794802162696771360920162", "179331476582465301947662591680083343067", "97835455985896156180627963183863811908", "163128951422547494852641933113485676640", "117184083143677443903774130300134904653"], "threshold":0.9}, "id":"ASB-A-281543351-dcbf7255", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/598eddaabe731afbfb3c9265d36b637a346e5604", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}