{"id":"ASB-A-475228205", "published":"2026-06-01T00:00:00Z", "modified":"2026-06-12T15:08:17.296522730Z", "aliases":["CVE-2026-28578", "A-475228205"], "details":"In multiple functions of DevicePolicyManagerService.java, there is a possible desync from persistence due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-06-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4914d6e98bd25e620867650e0e431df3ad23a886"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"303266711130788979874224706005915765840", "length":412}, "id":"ASB-A-475228205-019f769a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4914d6e98bd25e620867650e0e431df3ad23a886", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setManagedProfileCallerIdAccessPolicy"}}, {"deprecated":false, "digest":{"function_hash":"207449837630846237906541959011152520299", "length":418}, "id":"ASB-A-475228205-1d2256e2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4914d6e98bd25e620867650e0e431df3ad23a886", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setManagedProfileContactsAccessPolicy"}}, {"deprecated":false, "digest":{"function_hash":"60826015810146396611988331290802557367", "length":402}, "id":"ASB-A-475228205-925c1201", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4914d6e98bd25e620867650e0e431df3ad23a886", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setCredentialManagerPolicy"}}, {"deprecated":false, "digest":{"line_hashes":["52303834117526964974535894149334157557", "47092742295154542111358333548692782379", "218494930842767904347382783561083953502", "66193070088668267777623605746202773628", "40504487971583235310430996958408732873", "47092742295154542111358333548692782379", "218494930842767904347382783561083953502", "66193070088668267777623605746202773628", "262351568022786085567949903422534282026", "47092742295154542111358333548692782379", "90121249441134976827702512807196265913", "227943955620678516408729597126693293077", "114447064935241536511235765435006917087", "207382626587974545315557577389627551323", "201313886097799427127474789421013396700"], "threshold":0.9}, "id":"ASB-A-475228205-b2edc768", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4914d6e98bd25e620867650e0e431df3ad23a886", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-06-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/36421c7d97b00d05fd0be4c7050c3bee59058ad8"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"339273458278143368544769738232531133975", "length":386}, "id":"ASB-A-475228205-14bdd0c4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36421c7d97b00d05fd0be4c7050c3bee59058ad8", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setCredentialManagerPolicy"}}, {"deprecated":false, "digest":{"function_hash":"285411880379529691995832778404715235780", "length":380}, "id":"ASB-A-475228205-206725a7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36421c7d97b00d05fd0be4c7050c3bee59058ad8", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setManagedProfileCallerIdAccessPolicy"}}, {"deprecated":false, "digest":{"line_hashes":["52303834117526964974535894149334157557", "47092742295154542111358333548692782379", "232680074151319339441548200134114675080", "309404041269946475577540432195829235635", "40504487971583235310430996958408732873", "47092742295154542111358333548692782379", "232680074151319339441548200134114675080", "309404041269946475577540432195829235635", "262351568022786085567949903422534282026", "47092742295154542111358333548692782379", "90121249441134976827702512807196265913", "227943955620678516408729597126693293077", "168873420784130651682985356436263605776", "207382626587974545315557577389627551323", "201313886097799427127474789421013396700"], "threshold":0.9}, "id":"ASB-A-475228205-63b441da", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36421c7d97b00d05fd0be4c7050c3bee59058ad8", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"240555449901019055093991664546335654922", "length":386}, "id":"ASB-A-475228205-d1d5105f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/36421c7d97b00d05fd0be4c7050c3bee59058ad8", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setManagedProfileContactsAccessPolicy"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-06-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/04023137da055ba8a7054d9772b5fdb36cb19ddb"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"285411880379529691995832778404715235780", "length":380}, "id":"ASB-A-475228205-47eead7b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/04023137da055ba8a7054d9772b5fdb36cb19ddb", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setManagedProfileCallerIdAccessPolicy"}}, {"deprecated":false, "digest":{"line_hashes":["52303834117526964974535894149334157557", "47092742295154542111358333548692782379", "232680074151319339441548200134114675080", "309404041269946475577540432195829235635", "40504487971583235310430996958408732873", "47092742295154542111358333548692782379", "232680074151319339441548200134114675080", "309404041269946475577540432195829235635", "262351568022786085567949903422534282026", "47092742295154542111358333548692782379", "90121249441134976827702512807196265913", "227943955620678516408729597126693293077", "168873420784130651682985356436263605776", "207382626587974545315557577389627551323", "201313886097799427127474789421013396700"], "threshold":0.9}, "id":"ASB-A-475228205-4ac5fe40", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/04023137da055ba8a7054d9772b5fdb36cb19ddb", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"339273458278143368544769738232531133975", "length":386}, "id":"ASB-A-475228205-6177cec3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/04023137da055ba8a7054d9772b5fdb36cb19ddb", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setCredentialManagerPolicy"}}, {"deprecated":false, "digest":{"function_hash":"240555449901019055093991664546335654922", "length":386}, "id":"ASB-A-475228205-af07a818", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/04023137da055ba8a7054d9772b5fdb36cb19ddb", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setManagedProfileContactsAccessPolicy"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-06-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bb3184f1df179ce052b37c9ad50e98ae5fed67fa"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"240555449901019055093991664546335654922", "length":386}, "id":"ASB-A-475228205-1f9c3c1a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bb3184f1df179ce052b37c9ad50e98ae5fed67fa", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setManagedProfileContactsAccessPolicy"}}, {"deprecated":false, "digest":{"line_hashes":["52303834117526964974535894149334157557", "47092742295154542111358333548692782379", "232680074151319339441548200134114675080", "309404041269946475577540432195829235635", "40504487971583235310430996958408732873", "47092742295154542111358333548692782379", "232680074151319339441548200134114675080", "309404041269946475577540432195829235635", "262351568022786085567949903422534282026", "47092742295154542111358333548692782379", "90121249441134976827702512807196265913", "227943955620678516408729597126693293077", "168873420784130651682985356436263605776", "207382626587974545315557577389627551323", "201313886097799427127474789421013396700"], "threshold":0.9}, "id":"ASB-A-475228205-9ab18965", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bb3184f1df179ce052b37c9ad50e98ae5fed67fa", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"285411880379529691995832778404715235780", "length":380}, "id":"ASB-A-475228205-af3253f2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bb3184f1df179ce052b37c9ad50e98ae5fed67fa", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setManagedProfileCallerIdAccessPolicy"}}, {"deprecated":false, "digest":{"function_hash":"339273458278143368544769738232531133975", "length":386}, "id":"ASB-A-475228205-e969860d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/bb3184f1df179ce052b37c9ad50e98ae5fed67fa", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setCredentialManagerPolicy"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-06-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f344abfad1799fb6b16de99f43be955994f957ae"], "severity":"High", "spl":"2026-06-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"240555449901019055093991664546335654922", "length":386}, "id":"ASB-A-475228205-03c83255", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f344abfad1799fb6b16de99f43be955994f957ae", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setManagedProfileContactsAccessPolicy"}}, {"deprecated":false, "digest":{"line_hashes":["210872116382483639414526789930992814917", "28277747602812670171382934067539069453", "328987492235139661856229426084791586868", "205272411713154587056451093223560802429", "52303834117526964974535894149334157557", "47092742295154542111358333548692782379", "232680074151319339441548200134114675080", "309404041269946475577540432195829235635", "40504487971583235310430996958408732873", "47092742295154542111358333548692782379", "232680074151319339441548200134114675080", "309404041269946475577540432195829235635", "262351568022786085567949903422534282026", "47092742295154542111358333548692782379", "90121249441134976827702512807196265913", "227943955620678516408729597126693293077", "168873420784130651682985356436263605776", "207382626587974545315557577389627551323", "201313886097799427127474789421013396700"], "threshold":0.9}, "id":"ASB-A-475228205-4eaf8dd1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f344abfad1799fb6b16de99f43be955994f957ae", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"285411880379529691995832778404715235780", "length":380}, "id":"ASB-A-475228205-b18be5eb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f344abfad1799fb6b16de99f43be955994f957ae", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setManagedProfileCallerIdAccessPolicy"}}, {"deprecated":false, "digest":{"function_hash":"339273458278143368544769738232531133975", "length":386}, "id":"ASB-A-475228205-eb7bd9bd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f344abfad1799fb6b16de99f43be955994f957ae", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setCredentialManagerPolicy"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-06-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/48c17df8bdc45e4175a33978791957d460388b72"}]}