{"id":"ASB-A-503434084", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-02T16:38:00.081625681Z", "aliases":["CVE-2026-58955", "A-503434084"], "details":"In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/778befd095741a74c44bb4918a62a489db21a960"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["99289647571232510481389812104751965914", "50051294126976746144821310756638615682", "21412844261693208389762148924252246198", "193336673682089301328998255716838246639", "248967070127580637519481399638066224127", "328663608048165839616934861231461969752"], "threshold":0.9}, "id":"ASB-A-503434084-2eeb0a10", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/778befd095741a74c44bb4918a62a489db21a960", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"}}, {"deprecated":false, "digest":{"function_hash":"40576872034152590526321012112743910430", "length":1900}, "id":"ASB-A-503434084-f99d2f79", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/778befd095741a74c44bb4918a62a489db21a960", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java", "function":"updateNotificationChannel"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fa35047864a3d2fd942dbfc68bc4300dc157bd13"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"98412343933750007730201275554316344453", "length":1913}, "id":"ASB-A-503434084-4df4c2fb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fa35047864a3d2fd942dbfc68bc4300dc157bd13", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java", "function":"updateNotificationChannel"}}, {"deprecated":false, "digest":{"line_hashes":["99289647571232510481389812104751965914", "50051294126976746144821310756638615682", "21412844261693208389762148924252246198", "193336673682089301328998255716838246639", "248967070127580637519481399638066224127", "328663608048165839616934861231461969752"], "threshold":0.9}, "id":"ASB-A-503434084-d3a8f761", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/fa35047864a3d2fd942dbfc68bc4300dc157bd13", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5b98f9c946596f2e9727d23842250482e1373cc0"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"187646998218516605980128758778494578736", "length":1972}, "id":"ASB-A-503434084-05676eb9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5b98f9c946596f2e9727d23842250482e1373cc0", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java", "function":"updateNotificationChannel"}}, {"deprecated":false, "digest":{"line_hashes":["99289647571232510481389812104751965914", "50051294126976746144821310756638615682", "21412844261693208389762148924252246198", "193336673682089301328998255716838246639", "248967070127580637519481399638066224127", "328663608048165839616934861231461969752"], "threshold":0.9}, "id":"ASB-A-503434084-158f9f46", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5b98f9c946596f2e9727d23842250482e1373cc0", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4fad0e6dbe9e2519e9665ff5d1c5fca958f83e85"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["99289647571232510481389812104751965914", "50051294126976746144821310756638615682", "21412844261693208389762148924252246198", "193336673682089301328998255716838246639", "248967070127580637519481399638066224127", "328663608048165839616934861231461969752"], "threshold":0.9}, "id":"ASB-A-503434084-4599eb1f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4fad0e6dbe9e2519e9665ff5d1c5fca958f83e85", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"}}, {"deprecated":false, "digest":{"function_hash":"170955458052630401049378895542129874137", "length":1958}, "id":"ASB-A-503434084-533dcaeb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4fad0e6dbe9e2519e9665ff5d1c5fca958f83e85", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java", "function":"updateNotificationChannel"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d0df98fe6deeb9dca44575a9fd4ec66360a8cd81"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"29972710228600433142493442158860577637", "length":2050}, "id":"ASB-A-503434084-575c4338", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d0df98fe6deeb9dca44575a9fd4ec66360a8cd81", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java", "function":"updateNotificationChannel"}}, {"deprecated":false, "digest":{"line_hashes":["99289647571232510481389812104751965914", "50051294126976746144821310756638615682", "21412844261693208389762148924252246198", "193336673682089301328998255716838246639", "248967070127580637519481399638066224127", "328663608048165839616934861231461969752"], "threshold":0.9}, "id":"ASB-A-503434084-9146dbca", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d0df98fe6deeb9dca44575a9fd4ec66360a8cd81", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/db70698d55c4c9230c47334bc3071859b4cfec3d"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["99289647571232510481389812104751965914", "50051294126976746144821310756638615682", "21412844261693208389762148924252246198", "193336673682089301328998255716838246639", "248967070127580637519481399638066224127", "328663608048165839616934861231461969752"], "threshold":0.9}, "id":"ASB-A-503434084-5bb9166d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/db70698d55c4c9230c47334bc3071859b4cfec3d", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"}}, {"deprecated":false, "digest":{"function_hash":"24535744016768166690620379697554231943", "length":1661}, "id":"ASB-A-503434084-ac5815da", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/db70698d55c4c9230c47334bc3071859b4cfec3d", "target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java", "function":"updateNotificationChannel"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}