{"id":"ASB-A-515039631", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-02T16:38:00.081625681Z", "aliases":["CVE-2026-59021", "A-515039631"], "details":"In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981", "https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"34659601494023799482677074164532099248", "length":142}, "id":"ASB-A-515039631-05095ef8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981", "target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java", "function":"PackageSetPolicyValue"}}, {"deprecated":false, "digest":{"line_hashes":["243368936905742620578513068549026548445", "193110667441231283321476965073360736288", "218099890861778408405069922671975548474", "175126710795153036151242552958750216267", "47901839472414805516038092242920985095", "177801360853088162253520013067887973566", "199489608104889314402184530140110487542", "208484254811162875739360157143140204690"], "threshold":0.9}, "id":"ASB-A-515039631-0d7177be", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"}}, {"deprecated":false, "digest":{"line_hashes":["321763733962275643559118229726044710719", "88684299452946300831045243716602147434", "284036392316726610070016885761603217582", "87793410835511240702531674304976622635", "153799828404160278957079870272178625848", "294170385808985121110335768937967819179", "234298953118864217095220005926070483053", "91514579350714577320962977222088152713", "127966128950204224917871732393106704714"], "threshold":0.9}, "id":"ASB-A-515039631-1183479b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"153200294435752143022356277837100581238", "length":318}, "id":"ASB-A-515039631-19a6ed51", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"function_hash":"267865789664666215397381617537400502970", "length":883}, "id":"ASB-A-515039631-2df6b0ac", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readPoliciesInner"}}, {"deprecated":false, "digest":{"function_hash":"255107048940014734816711678071447957227", "length":527}, "id":"ASB-A-515039631-6cb06717", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readFromFileLocked"}}, {"deprecated":false, "digest":{"line_hashes":["231633415161139923264656521787716904812", "269231175529179720030483611474918175209", "102012814968420342914288420277635581331", "93200900556949143228344950415444301051", "318251155983788843045672270729713195027", "209808470815853812058074118283198803459", "6901387035422447823454668606629831614", "330452917664844419508106711146933288917"], "threshold":0.9}, "id":"ASB-A-515039631-b249f271", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"}}, {"deprecated":false, "digest":{"function_hash":"24882925491811920059342573902720348974", "length":499}, "id":"ASB-A-515039631-be5c4ec4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"line_hashes":["223879276649102080066000130017185689122", "186731316937927884938313802110980124160", "336434658143821611637790727334031677083", "230506368987111576117929438715439876954"], "threshold":0.9}, "id":"ASB-A-515039631-e7f87647", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981", "target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"153200294435752143022356277837100581238", "length":318}, "id":"ASB-A-515039631-01d6932b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"line_hashes":["187157026194315630431998201763619921383", "182832263298963824173254745392698809271", "192993963584580652809094444558050481906", "38162963340999499380158558052648965674", "187157026194315630431998201763619921383", "182832263298963824173254745392698809271", "192993963584580652809094444558050481906", "38162963340999499380158558052648965674"], "threshold":0.9}, "id":"ASB-A-515039631-5cb45019", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}, {"deprecated":false, "digest":{"line_hashes":["193110667441231283321476965073360736288", "218099890861778408405069922671975548474", "89176410662035538831963471120198143429", "177453545019551287784859045694315688337", "47901839472414805516038092242920985095", "177801360853088162253520013067887973566", "199489608104889314402184530140110487542", "208484254811162875739360157143140204690"], "threshold":0.9}, "id":"ASB-A-515039631-8492467c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"}}, {"deprecated":false, "digest":{"function_hash":"24882925491811920059342573902720348974", "length":499}, "id":"ASB-A-515039631-8aa21e24", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"function_hash":"144534164702623436067250121223596769952", "length":937}, "id":"ASB-A-515039631-9894539b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readLocalPoliciesInner"}}, {"deprecated":false, "digest":{"function_hash":"324163158959534208134387466465670550070", "length":975}, "id":"ASB-A-515039631-9f4daa1c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"line_hashes":["231633415161139923264656521787716904812", "269231175529179720030483611474918175209", "102012814968420342914288420277635581331", "93200900556949143228344950415444301051", "120073402124271382827459362158695492376", "223074383736618463708398308823048011759", "97141836362335028432807683536564536345", "233500733453329924917418933405837160610", "172931090354481768446090546326237088084", "97369051588649790311439416251175818075", "145894044510438173439087263382386211606", "255133850560853693888436084716032824664", "93959598156630338415363714976250666289", "319507923336257377973081768716185784660", "263692978228504464328665042866764277219", "89235682808816783233380707645869389968", "336876593598446450658372870250527534403", "227406213994769042072163562326322003508", "318251155983788843045672270729713195027", "209808470815853812058074118283198803459", "284518855258791654270968686466994467280", "52411291727970283365349022538944650986", "332238720723635417512040488880234655190", "185172603390338943979633985220324159275", "265039840649972595120930317926251363348", "116095883250075927567837509947103506028"], "threshold":0.9}, "id":"ASB-A-515039631-c808d369", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"}}, {"deprecated":false, "digest":{"function_hash":"39109735775204805395828111001558560622", "length":760}, "id":"ASB-A-515039631-cfd57beb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readGlobalPoliciesInner"}}, {"deprecated":false, "digest":{"line_hashes":["136909110875517073025481044960805550267", "126660817896163870841392503732641801492", "128832033368376731957470524280104951011", "17305247469949934761416720454757604726", "257459097651405906017661915543721367607", "300800078245935808160638892561650678457", "57120702040914146305716132267983174489", "101847544470687784754996531978080312430"], "threshold":0.9}, "id":"ASB-A-515039631-d5c6a332", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921", "https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"216022129035601212696996747116777203907", "length":879}, "id":"ASB-A-515039631-25d7a385", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readPoliciesInner"}}, {"deprecated":false, "digest":{"function_hash":"34659601494023799482677074164532099248", "length":142}, "id":"ASB-A-515039631-2d5e0d53", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921", "target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java", "function":"PackageSetPolicyValue"}}, {"deprecated":false, "digest":{"function_hash":"255107048940014734816711678071447957227", "length":527}, "id":"ASB-A-515039631-3bb36e4c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readFromFileLocked"}}, {"deprecated":false, "digest":{"line_hashes":["321763733962275643559118229726044710719", "88684299452946300831045243716602147434", "284036392316726610070016885761603217582", "87793410835511240702531674304976622635", "153799828404160278957079870272178625848", "294170385808985121110335768937967819179", "234298953118864217095220005926070483053", "91514579350714577320962977222088152713", "127966128950204224917871732393106704714"], "threshold":0.9}, "id":"ASB-A-515039631-42ab0e76", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"153200294435752143022356277837100581238", "length":318}, "id":"ASB-A-515039631-4ac1e05b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"function_hash":"24882925491811920059342573902720348974", "length":499}, "id":"ASB-A-515039631-6ec2689f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"line_hashes":["231633415161139923264656521787716904812", "269231175529179720030483611474918175209", "102012814968420342914288420277635581331", "93200900556949143228344950415444301051", "318251155983788843045672270729713195027", "209808470815853812058074118283198803459", "284518855258791654270968686466994467280", "52411291727970283365349022538944650986"], "threshold":0.9}, "id":"ASB-A-515039631-83ae8ab3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"}}, {"deprecated":false, "digest":{"line_hashes":["243368936905742620578513068549026548445", "193110667441231283321476965073360736288", "218099890861778408405069922671975548474", "89176410662035538831963471120198143429", "47901839472414805516038092242920985095", "177801360853088162253520013067887973566", "199489608104889314402184530140110487542", "208484254811162875739360157143140204690"], "threshold":0.9}, "id":"ASB-A-515039631-ba226279", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"}}, {"deprecated":false, "digest":{"line_hashes":["223879276649102080066000130017185689122", "186731316937927884938313802110980124160", "336434658143821611637790727334031677083", "230506368987111576117929438715439876954"], "threshold":0.9}, "id":"ASB-A-515039631-e3e4fef8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921", "target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504", "https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"255107048940014734816711678071447957227", "length":527}, "id":"ASB-A-515039631-0ee58de9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readFromFileLocked"}}, {"deprecated":false, "digest":{"line_hashes":["231633415161139923264656521787716904812", "269231175529179720030483611474918175209", "102012814968420342914288420277635581331", "93200900556949143228344950415444301051", "318251155983788843045672270729713195027", "209808470815853812058074118283198803459", "284518855258791654270968686466994467280", "52411291727970283365349022538944650986"], "threshold":0.9}, "id":"ASB-A-515039631-18afab90", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"}}, {"deprecated":false, "digest":{"function_hash":"34659601494023799482677074164532099248", "length":142}, "id":"ASB-A-515039631-25ca61a1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504", "target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java", "function":"PackageSetPolicyValue"}}, {"deprecated":false, "digest":{"function_hash":"24882925491811920059342573902720348974", "length":499}, "id":"ASB-A-515039631-25f6f843", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"function_hash":"216022129035601212696996747116777203907", "length":879}, "id":"ASB-A-515039631-5742f2ce", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readPoliciesInner"}}, {"deprecated":false, "digest":{"line_hashes":["223879276649102080066000130017185689122", "186731316937927884938313802110980124160", "336434658143821611637790727334031677083", "230506368987111576117929438715439876954"], "threshold":0.9}, "id":"ASB-A-515039631-5a76a2fd", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504", "target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java"}}, {"deprecated":false, "digest":{"line_hashes":["321763733962275643559118229726044710719", "88684299452946300831045243716602147434", "284036392316726610070016885761603217582", "87793410835511240702531674304976622635", "153799828404160278957079870272178625848", "294170385808985121110335768937967819179", "234298953118864217095220005926070483053", "91514579350714577320962977222088152713", "127966128950204224917871732393106704714"], "threshold":0.9}, "id":"ASB-A-515039631-62bdad56", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"153200294435752143022356277837100581238", "length":318}, "id":"ASB-A-515039631-c6930f08", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"line_hashes":["243368936905742620578513068549026548445", "193110667441231283321476965073360736288", "218099890861778408405069922671975548474", "89176410662035538831963471120198143429", "47901839472414805516038092242920985095", "177801360853088162253520013067887973566", "199489608104889314402184530140110487542", "208484254811162875739360157143140204690"], "threshold":0.9}, "id":"ASB-A-515039631-e59b9c28", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287", "https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["321763733962275643559118229726044710719", "88684299452946300831045243716602147434", "284036392316726610070016885761603217582", "87793410835511240702531674304976622635", "153799828404160278957079870272178625848", "294170385808985121110335768937967819179", "234298953118864217095220005926070483053", "91514579350714577320962977222088152713", "127966128950204224917871732393106704714"], "threshold":0.9}, "id":"ASB-A-515039631-137cd5fe", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"24882925491811920059342573902720348974", "length":499}, "id":"ASB-A-515039631-365e621b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"line_hashes":["223879276649102080066000130017185689122", "186731316937927884938313802110980124160", "336434658143821611637790727334031677083", "230506368987111576117929438715439876954"], "threshold":0.9}, "id":"ASB-A-515039631-56d3da4b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287", "target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java"}}, {"deprecated":false, "digest":{"line_hashes":["243368936905742620578513068549026548445", "193110667441231283321476965073360736288", "218099890861778408405069922671975548474", "89176410662035538831963471120198143429", "47901839472414805516038092242920985095", "177801360853088162253520013067887973566", "199489608104889314402184530140110487542", "208484254811162875739360157143140204690"], "threshold":0.9}, "id":"ASB-A-515039631-74487d8e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"}}, {"deprecated":false, "digest":{"function_hash":"34659601494023799482677074164532099248", "length":142}, "id":"ASB-A-515039631-865a2b2f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287", "target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java", "function":"PackageSetPolicyValue"}}, {"deprecated":false, "digest":{"line_hashes":["231633415161139923264656521787716904812", "269231175529179720030483611474918175209", "102012814968420342914288420277635581331", "93200900556949143228344950415444301051", "318251155983788843045672270729713195027", "209808470815853812058074118283198803459", "284518855258791654270968686466994467280", "52411291727970283365349022538944650986"], "threshold":0.9}, "id":"ASB-A-515039631-87a84133", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"}}, {"deprecated":false, "digest":{"function_hash":"153200294435752143022356277837100581238", "length":318}, "id":"ASB-A-515039631-a378e6f6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"function_hash":"267865789664666215397381617537400502970", "length":883}, "id":"ASB-A-515039631-ddf5c6ea", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readPoliciesInner"}}, {"deprecated":false, "digest":{"function_hash":"255107048940014734816711678071447957227", "length":527}, "id":"ASB-A-515039631-e3111737", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readFromFileLocked"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["138029899568404744415543479903625660347", "277777175013285069235910967327133168094", "136909110875517073025481044960805550267", "126660817896163870841392503732641801492", "190685045329720459263675054739054705658", "36137412102058834940740934970615629155", "257459097651405906017661915543721367607", "300800078245935808160638892561650678457", "57120702040914146305716132267983174489", "101847544470687784754996531978080312430"], "threshold":0.9}, "id":"ASB-A-515039631-07eb5391", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java"}}, {"deprecated":false, "digest":{"line_hashes":["243368936905742620578513068549026548445", "193110667441231283321476965073360736288", "218099890861778408405069922671975548474", "67480142918158156442938324893534754062", "137526687686617424346282555211034340633", "13497933271433295118353315498593234847", "204505103211176356857187152675616360188", "6044358487019089186287254600581253562"], "threshold":0.9}, "id":"ASB-A-515039631-1465977b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/StringSetPolicySerializer.java"}}, {"deprecated":false, "digest":{"line_hashes":["187157026194315630431998201763619921383", "182832263298963824173254745392698809271", "192993963584580652809094444558050481906", "38162963340999499380158558052648965674", "187157026194315630431998201763619921383", "182832263298963824173254745392698809271", "192993963584580652809094444558050481906", "38162963340999499380158558052648965674"], "threshold":0.9}, "id":"ASB-A-515039631-2c2ee9a3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}, {"deprecated":false, "digest":{"line_hashes":["231633415161139923264656521787716904812", "269231175529179720030483611474918175209", "102012814968420342914288420277635581331", "93200900556949143228344950415444301051", "318251155983788843045672270729713195027", "209808470815853812058074118283198803459", "284518855258791654270968686466994467280", "52411291727970283365349022538944650986"], "threshold":0.9}, "id":"ASB-A-515039631-3acdd7fb", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"}}, {"deprecated":false, "digest":{"function_hash":"324163158959534208134387466465670550070", "length":975}, "id":"ASB-A-515039631-49cd9da8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"function_hash":"39109735775204805395828111001558560622", "length":760}, "id":"ASB-A-515039631-8588e3ba", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readGlobalPoliciesInner"}}, {"deprecated":false, "digest":{"function_hash":"144534164702623436067250121223596769952", "length":937}, "id":"ASB-A-515039631-8df320db", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"readLocalPoliciesInner"}}, {"deprecated":false, "digest":{"function_hash":"24882925491811920059342573902720348974", "length":499}, "id":"ASB-A-515039631-b54f8d21", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java", "function":"readFromXml"}}, {"deprecated":false, "digest":{"function_hash":"280582108248251692340338970090482519872", "length":317}, "id":"ASB-A-515039631-c70c1684", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/StringSetPolicySerializer.java", "function":"readFromXml"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}