{"id":"ASB-A-414389102", "published":"2026-06-01T00:00:00Z", "modified":"2026-06-26T15:22:10.377767615Z", "aliases":["CVE-2026-0085", "A-414389102"], "details":"In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/providers/ContactsProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-06-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/a191ae10a38ba55f76fe54a84ec153bf74e672c7"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"139858400390397635892108979778100010908", "length":372}, "id":"ASB-A-414389102-1342cfee", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/a191ae10a38ba55f76fe54a84ec153bf74e672c7", "target":{"file":"src/com/android/providers/contacts/DataRowHandler.java", "function":"applySimpleFieldMaxSize"}}, {"deprecated":false, "digest":{"line_hashes":["217740912455229234456099611545840262735", "208189136215709142876282477696876596735", "257545721010274112638913579184386032232", "87622368114666001643778982487956451067", "24997434560523085361128136394026523753", "188523932101793786400876489344635821660", "325040967150777450900894149068657882296", "146052251027700879332656909156143698150"], "threshold":0.9}, "id":"ASB-A-414389102-95372082", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/a191ae10a38ba55f76fe54a84ec153bf74e672c7", "target":{"file":"src/com/android/providers/contacts/DataRowHandler.java"}}]}}, {"package":{"name":"platform/packages/providers/ContactsProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-06-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/731fa107fa63ffc69f18a8d11be3fd4be20d6b1f"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"139858400390397635892108979778100010908", "length":372}, "id":"ASB-A-414389102-79bf410d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/731fa107fa63ffc69f18a8d11be3fd4be20d6b1f", "target":{"file":"src/com/android/providers/contacts/DataRowHandler.java", "function":"applySimpleFieldMaxSize"}}, {"deprecated":false, "digest":{"line_hashes":["217740912455229234456099611545840262735", "208189136215709142876282477696876596735", "257545721010274112638913579184386032232", "87622368114666001643778982487956451067", "24997434560523085361128136394026523753", "188523932101793786400876489344635821660", "325040967150777450900894149068657882296", "146052251027700879332656909156143698150"], "threshold":0.9}, "id":"ASB-A-414389102-b71077ea", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/731fa107fa63ffc69f18a8d11be3fd4be20d6b1f", "target":{"file":"src/com/android/providers/contacts/DataRowHandler.java"}}]}}, {"package":{"name":"platform/packages/providers/ContactsProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-06-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/e3b00f098b89148aab2eded680ad4eed2a28493a"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["217740912455229234456099611545840262735", "208189136215709142876282477696876596735", "257545721010274112638913579184386032232", "87622368114666001643778982487956451067", "24997434560523085361128136394026523753", "188523932101793786400876489344635821660", "325040967150777450900894149068657882296", "146052251027700879332656909156143698150"], "threshold":0.9}, "id":"ASB-A-414389102-7a3fa3c7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/e3b00f098b89148aab2eded680ad4eed2a28493a", "target":{"file":"src/com/android/providers/contacts/DataRowHandler.java"}}, {"deprecated":false, "digest":{"function_hash":"139858400390397635892108979778100010908", "length":372}, "id":"ASB-A-414389102-7f900368", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/e3b00f098b89148aab2eded680ad4eed2a28493a", "target":{"file":"src/com/android/providers/contacts/DataRowHandler.java", "function":"applySimpleFieldMaxSize"}}]}}, {"package":{"name":"platform/packages/providers/ContactsProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-06-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/90e517624b135b8ffc00297b7452efe862143d35"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["217740912455229234456099611545840262735", "208189136215709142876282477696876596735", "257545721010274112638913579184386032232", "87622368114666001643778982487956451067", "24997434560523085361128136394026523753", "188523932101793786400876489344635821660", "325040967150777450900894149068657882296", "146052251027700879332656909156143698150"], "threshold":0.9}, "id":"ASB-A-414389102-21389f53", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/90e517624b135b8ffc00297b7452efe862143d35", "target":{"file":"src/com/android/providers/contacts/DataRowHandler.java"}}, {"deprecated":false, "digest":{"function_hash":"139858400390397635892108979778100010908", "length":372}, "id":"ASB-A-414389102-647a6630", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/90e517624b135b8ffc00297b7452efe862143d35", "target":{"file":"src/com/android/providers/contacts/DataRowHandler.java", "function":"applySimpleFieldMaxSize"}}]}}, {"package":{"name":"platform/packages/providers/ContactsProvider", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-06-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/ff5a13570e01655dbd7f633c3eb3f5d535cb8294"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["217740912455229234456099611545840262735", "208189136215709142876282477696876596735", "257545721010274112638913579184386032232", "87622368114666001643778982487956451067", "24997434560523085361128136394026523753", "188523932101793786400876489344635821660", "325040967150777450900894149068657882296", "146052251027700879332656909156143698150"], "threshold":0.9}, "id":"ASB-A-414389102-8f2d8f81", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/ff5a13570e01655dbd7f633c3eb3f5d535cb8294", "target":{"file":"src/com/android/providers/contacts/DataRowHandler.java"}}, {"deprecated":false, "digest":{"function_hash":"139858400390397635892108979778100010908", "length":372}, "id":"ASB-A-414389102-fa5f6ce4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/ff5a13570e01655dbd7f633c3eb3f5d535cb8294", "target":{"file":"src/com/android/providers/contacts/DataRowHandler.java", "function":"applySimpleFieldMaxSize"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-06-01"}]}