{"id":"ASB-A-396667508", "published":"2026-06-01T00:00:00Z", "modified":"2026-06-26T15:22:10.377767615Z", "aliases":["CVE-2025-48648", "A-396667508"], "details":"In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-06-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4", "https://android.googlesource.com/platform/frameworks/base/+/8a638b787a7d2f4aaf3cce21333fa7a42514dfce"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["311776075868199209908180593235021278247", "173554188953509075021848555997114625841", "30994244569721521029653103736234205919", "16544848603399734777459420411359972243", "69187395976085701101404452460821305564", "107330269270955045944742671467092557026", "5057675959711498362234534126275630108", "82010185885517143293113145326211704617", "242529682537384182506986366557682501806", "221944401727185269755334866930184879132", "158448676480102414027779369708045930325", "156920046477798560374823902624051824252", "273027613730394784394737295736963397348", "104424195872113355434228402279043544550", "156233372356047225633113731636314392279", "37427652773195948809491513767979418093", "93166199624803918610661430068480261783", "171498246101345202195297849406128970206", "59795174511389018878761370653469910317", "300043298138394808906312351494962799994", "248496070369677747540641344587024256709", "168516352214166090808396299173109141010", "294448047507203347484002755347583574683", "280256673906256791922308082785999670777", "72694666756546133538567949547702548006"], "threshold":0.9}, "id":"ASB-A-396667508-09e9399d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"50137030720129843182424868869123684399", "length":345}, "id":"ASB-A-396667508-19fd929d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"areNotificationsEnabledForPackage"}}, {"deprecated":false, "digest":{"function_hash":"231246527256660435838079530375010976262", "length":480}, "id":"ASB-A-396667508-424b8dfd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"getConversationNotificationChannel"}}, {"deprecated":false, "digest":{"function_hash":"207777736296645912941392049263076360237", "length":595}, "id":"ASB-A-396667508-4e9b8e68", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"resolveNotificationUid"}}, {"deprecated":false, "digest":{"function_hash":"208068871326447281625678211215124308479", "length":1420}, "id":"ASB-A-396667508-6e09ba0a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4", "target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java", "function":"setup"}}, {"deprecated":false, "digest":{"function_hash":"305445064151357916036679857594399755156", "length":295}, "id":"ASB-A-396667508-8030a6db", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"checkCallerIsSameApp"}}, {"deprecated":false, "digest":{"function_hash":"34004467386491868909730786709998970328", "length":320}, "id":"ASB-A-396667508-db64af6e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"getEffectsSuppressor"}}, {"deprecated":false, "digest":{"line_hashes":["167501126716018587119275499810791912118", "318486943131436126345940480897073881866", "143651495922578221084417533520456015137", "212789153438999280831028487049194161453", "128300056028351732686437431211261181429", "330860463999469096656304940898754894442", "127257735946869828535420129665154153304", "202405628641787956841393280434915673904", "273644883567035735326125364280467292564", "39610213993419028309327006183383145251", "17413738809138397389695830717253062469", "180606999226419907722329401448844541964", "84933873814762606350458618195785045928", "13797188950598143719055117428339577816", "326241967822020216091373510351404593739", "40041870310826370440010009241901796207", "72243195534743323844656786369263517528", "255286961527945673535438177890782077057"], "threshold":0.9}, "id":"ASB-A-396667508-e1774c06", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4", "target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"}}, {"deprecated":false, "digest":{"function_hash":"194054172599855610475842191744319332234", "length":2181}, "id":"ASB-A-396667508-f5fc6cd4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"validateAutomaticZenRule"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-06-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"53921670342947996092453171383702712902", "length":1323}, "id":"ASB-A-396667508-13f7633b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295", "target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java", "function":"setup"}}, {"deprecated":false, "digest":{"line_hashes":["311776075868199209908180593235021278247", "173554188953509075021848555997114625841", "30994244569721521029653103736234205919", "16544848603399734777459420411359972243", "69187395976085701101404452460821305564", "107330269270955045944742671467092557026", "5057675959711498362234534126275630108", "82010185885517143293113145326211704617", "242529682537384182506986366557682501806", "221944401727185269755334866930184879132", "158448676480102414027779369708045930325", "156920046477798560374823902624051824252", "273027613730394784394737295736963397348", "104424195872113355434228402279043544550", "156233372356047225633113731636314392279", "37427652773195948809491513767979418093", "93166199624803918610661430068480261783", "171498246101345202195297849406128970206", "59795174511389018878761370653469910317", "300043298138394808906312351494962799994", "248496070369677747540641344587024256709", "168516352214166090808396299173109141010", "294448047507203347484002755347583574683", "280256673906256791922308082785999670777", "72694666756546133538567949547702548006"], "threshold":0.9}, "id":"ASB-A-396667508-2ec6e55c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"34004467386491868909730786709998970328", "length":320}, "id":"ASB-A-396667508-41730810", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"getEffectsSuppressor"}}, {"deprecated":false, "digest":{"function_hash":"207777736296645912941392049263076360237", "length":595}, "id":"ASB-A-396667508-9332bda0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"resolveNotificationUid"}}, {"deprecated":false, "digest":{"function_hash":"305445064151357916036679857594399755156", "length":295}, "id":"ASB-A-396667508-b541f173", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"checkCallerIsSameApp"}}, {"deprecated":false, "digest":{"function_hash":"37690238828963878000712913465981266033", "length":353}, "id":"ASB-A-396667508-c09abf9f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"areNotificationsEnabledForPackage"}}, {"deprecated":false, "digest":{"function_hash":"21493660492147640206822512447945319315", "length":1572}, "id":"ASB-A-396667508-d3f7806f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"validateAutomaticZenRule"}}, {"deprecated":false, "digest":{"function_hash":"231246527256660435838079530375010976262", "length":480}, "id":"ASB-A-396667508-d61aa2a6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"getConversationNotificationChannel"}}, {"deprecated":false, "digest":{"line_hashes":["167501126716018587119275499810791912118", "318486943131436126345940480897073881866", "143651495922578221084417533520456015137", "212789153438999280831028487049194161453", "128300056028351732686437431211261181429", "330860463999469096656304940898754894442", "127257735946869828535420129665154153304", "202405628641787956841393280434915673904", "273644883567035735326125364280467292564", "39610213993419028309327006183383145251", "17413738809138397389695830717253062469", "180606999226419907722329401448844541964", "84933873814762606350458618195785045928", "13797188950598143719055117428339577816", "326241967822020216091373510351404593739", "34501281023628935063712763780394219378", "323289490898469783465079980922881859150", "61151563059221844998895245381018526678"], "threshold":0.9}, "id":"ASB-A-396667508-fa51bb87", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295", "target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-06-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"34004467386491868909730786709998970328", "length":320}, "id":"ASB-A-396667508-24ce6e6a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"getEffectsSuppressor"}}, {"deprecated":false, "digest":{"function_hash":"208068871326447281625678211215124308479", "length":1420}, "id":"ASB-A-396667508-30b926fb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4", "target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java", "function":"setup"}}, {"deprecated":false, "digest":{"line_hashes":["311776075868199209908180593235021278247", "173554188953509075021848555997114625841", "30994244569721521029653103736234205919", "16544848603399734777459420411359972243", "69187395976085701101404452460821305564", "107330269270955045944742671467092557026", "5057675959711498362234534126275630108", "82010185885517143293113145326211704617", "242529682537384182506986366557682501806", "221944401727185269755334866930184879132", "158448676480102414027779369708045930325", "156920046477798560374823902624051824252", "273027613730394784394737295736963397348", "104424195872113355434228402279043544550", "156233372356047225633113731636314392279", "37427652773195948809491513767979418093", "93166199624803918610661430068480261783", "171498246101345202195297849406128970206", "59795174511389018878761370653469910317", "300043298138394808906312351494962799994", "248496070369677747540641344587024256709", "168516352214166090808396299173109141010", "294448047507203347484002755347583574683", "280256673906256791922308082785999670777", "72694666756546133538567949547702548006"], "threshold":0.9}, "id":"ASB-A-396667508-3d880384", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"207777736296645912941392049263076360237", "length":595}, "id":"ASB-A-396667508-4a9e7b75", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"resolveNotificationUid"}}, {"deprecated":false, "digest":{"function_hash":"50137030720129843182424868869123684399", "length":345}, "id":"ASB-A-396667508-74b23183", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"areNotificationsEnabledForPackage"}}, {"deprecated":false, "digest":{"function_hash":"59191339780957130539963275365137952241", "length":1291}, "id":"ASB-A-396667508-83fd7c6e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"validateAutomaticZenRule"}}, {"deprecated":false, "digest":{"line_hashes":["167501126716018587119275499810791912118", "318486943131436126345940480897073881866", "143651495922578221084417533520456015137", "212789153438999280831028487049194161453", "128300056028351732686437431211261181429", "330860463999469096656304940898754894442", "127257735946869828535420129665154153304", "202405628641787956841393280434915673904", "273644883567035735326125364280467292564", "39610213993419028309327006183383145251", "17413738809138397389695830717253062469", "180606999226419907722329401448844541964", "84933873814762606350458618195785045928", "13797188950598143719055117428339577816", "326241967822020216091373510351404593739", "40041870310826370440010009241901796207", "72243195534743323844656786369263517528", "255286961527945673535438177890782077057"], "threshold":0.9}, "id":"ASB-A-396667508-c37c533e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4", "target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"}}, {"deprecated":false, "digest":{"function_hash":"305445064151357916036679857594399755156", "length":295}, "id":"ASB-A-396667508-e5c10250", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"checkCallerIsSameApp"}}, {"deprecated":false, "digest":{"function_hash":"231246527256660435838079530375010976262", "length":480}, "id":"ASB-A-396667508-eb69edfc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"getConversationNotificationChannel"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-06-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["311776075868199209908180593235021278247", "173554188953509075021848555997114625841", "30994244569721521029653103736234205919", "16544848603399734777459420411359972243", "69187395976085701101404452460821305564", "230858874161068579965200542526066464547", "248073214681357485477302217045111523716", "184646465235922378966532768242104740060", "320705647374390279630953455366129305776", "259719614258695601559025597029121012157", "105537389429175060221598269746763207726", "110570907393677328033717206344777840785", "36817893150851478897978189590751813895", "168516352214166090808396299173109141010", "294448047507203347484002755347583574683", "280256673906256791922308082785999670777", "72694666756546133538567949547702548006"], "threshold":0.9}, "id":"ASB-A-396667508-120238b0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"305445064151357916036679857594399755156", "length":295}, "id":"ASB-A-396667508-49372ecf", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"checkCallerIsSameApp"}}, {"deprecated":false, "digest":{"function_hash":"53921670342947996092453171383702712902", "length":1323}, "id":"ASB-A-396667508-bbeaba4e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705", "target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java", "function":"setup"}}, {"deprecated":false, "digest":{"function_hash":"231246527256660435838079530375010976262", "length":480}, "id":"ASB-A-396667508-db496b4d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"getConversationNotificationChannel"}}, {"deprecated":false, "digest":{"line_hashes":["167501126716018587119275499810791912118", "318486943131436126345940480897073881866", "143651495922578221084417533520456015137", "31009025591479672692194662111776868673", "252160476245399169130789295909641112834", "155877341641905023578416530582262621472", "109056397751080462341968595360174433210", "252237268444944532130811304789253907201", "139197936973216126785468848020887968055", "120046709075674548549695691740964987837", "155821714203419777662362063457669415519", "311602187478921553778809534058826673155", "67774471323848770003077394129421048957", "266289982402771435401118611319514875314", "80722307318898221249257415238934053817", "289359513436208212386337049230003429018", "339718667904611365457682021892769363550", "330338419510567171601645924086002668144", "68947804206987492735004414115348543235", "34501281023628935063712763780394219378", "323289490898469783465079980922881859150", "61151563059221844998895245381018526678"], "threshold":0.9}, "id":"ASB-A-396667508-eedb3b3a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705", "target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"}}, {"deprecated":false, "digest":{"function_hash":"37690238828963878000712913465981266033", "length":353}, "id":"ASB-A-396667508-fbd0836c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705", "target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java", "function":"areNotificationsEnabledForPackage"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-06-01"}]}