{"id":"ASB-A-443742082", "published":"2026-03-01T00:00:00Z", "modified":"2026-04-30T15:48:46.890647439Z", "aliases":["CVE-2026-0014", "A-443742082"], "details":"In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2-next:0"}, {"fixed":"16-qpr2-next:2026-03-01"}]}], "versions":["16-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1bc6b146137f76589146dff5cd82363de7ccfb7d"], "severity":"High", "spl":"2026-03-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"270661130086840515758877678412014809831", "length":261}, "id":"ASB-A-443742082-22aeb062", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1bc6b146137f76589146dff5cd82363de7ccfb7d", "target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java", "function":"isPackageNullOrSystem"}}, {"deprecated":false, "digest":{"line_hashes":["84520241135867156909061113203126500798", "70721867393809822898173016409670694781", "195335074680049813509517530819123445108", "325698393641586403902606717787371623983"], "threshold":0.9}, "id":"ASB-A-443742082-27739e74", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1bc6b146137f76589146dff5cd82363de7ccfb7d", "target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-03-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9cacc6180df8eb4451a23f122f457e413a299911"], "severity":"High", "spl":"2026-03-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"270661130086840515758877678412014809831", "length":261}, "id":"ASB-A-443742082-39bf82f5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9cacc6180df8eb4451a23f122f457e413a299911", "target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java", "function":"isPackageNullOrSystem"}}, {"deprecated":false, "digest":{"line_hashes":["84520241135867156909061113203126500798", "70721867393809822898173016409670694781", "195335074680049813509517530819123445108", "325698393641586403902606717787371623983"], "threshold":0.9}, "id":"ASB-A-443742082-9b23ba73", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9cacc6180df8eb4451a23f122f457e413a299911", "target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-03-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/066eff80abf013531320b8280637d1d00dd553a1"], "severity":"High", "spl":"2026-03-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"270661130086840515758877678412014809831", "length":261}, "id":"ASB-A-443742082-47e9ce20", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/066eff80abf013531320b8280637d1d00dd553a1", "target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java", "function":"isPackageNullOrSystem"}}, {"deprecated":false, "digest":{"line_hashes":["84520241135867156909061113203126500798", "70721867393809822898173016409670694781", "195335074680049813509517530819123445108", "325698393641586403902606717787371623983"], "threshold":0.9}, "id":"ASB-A-443742082-8983f3e8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/066eff80abf013531320b8280637d1d00dd553a1", "target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-03-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/624a725cb350414efe2aff42ea1baeadf3720e15"], "severity":"High", "spl":"2026-03-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["84520241135867156909061113203126500798", "70721867393809822898173016409670694781", "195335074680049813509517530819123445108", "325698393641586403902606717787371623983"], "threshold":0.9}, "id":"ASB-A-443742082-6b95fa50", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/624a725cb350414efe2aff42ea1baeadf3720e15", "target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"}}, {"deprecated":false, "digest":{"function_hash":"270661130086840515758877678412014809831", "length":261}, "id":"ASB-A-443742082-75bc807f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/624a725cb350414efe2aff42ea1baeadf3720e15", "target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java", "function":"isPackageNullOrSystem"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-03-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b243b0d29bb087067d9efb7f6e433e78cd9c9a89"], "severity":"High", "spl":"2026-03-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"270661130086840515758877678412014809831", "length":261}, "id":"ASB-A-443742082-1ae8c2db", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b243b0d29bb087067d9efb7f6e433e78cd9c9a89", "target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java", "function":"isPackageNullOrSystem"}}, {"deprecated":false, "digest":{"line_hashes":["84520241135867156909061113203126500798", "70721867393809822898173016409670694781", "195335074680049813509517530819123445108", "325698393641586403902606717787371623983"], "threshold":0.9}, "id":"ASB-A-443742082-9826330a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/b243b0d29bb087067d9efb7f6e433e78cd9c9a89", "target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-03-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/b51a58ecec96558e1c6b1d47728f45a8795dc7ab"}]}