{"id":"ASB-A-515158597", "published":"2026-10-01T00:00:00Z", "modified":"2026-10-06T15:36:24.859151902Z", "aliases":["CVE-2026-58834", "A-515158597"], "details":"In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-10-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d"], "severity":"High", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["67512861029338814249349861885314635053", "290156515777081318189778133334877633745", "127925059051352371839438547349036061467"], "threshold":0.9}, "id":"ASB-A-515158597-44412631", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"line_hashes":["71387856242766300111474108755639060906", "245722315977399161983952543873526432790", "131604536729388262005348928524854859898", "303055045182444199920398436940678675023", "120435722638721370935691190501569981545", "288961117767715855422939441556262966579", "22997619993064488372263118631628684631", "247303866414399357566020699537269283774"], "threshold":0.9}, "id":"ASB-A-515158597-8eb32da8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"101408601063527151196425862634223347783", "length":698}, "id":"ASB-A-515158597-dbd4b16e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"reapplyAllPoliciesOnBootLocked"}}, {"deprecated":false, "digest":{"function_hash":"302280238773157148435720193895737547847", "length":3292}, "id":"ASB-A-515158597-e6eea9e8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setPermissionGrantState"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-10-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9"], "severity":"High", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["71387856242766300111474108755639060906", "245722315977399161983952543873526432790", "131604536729388262005348928524854859898", "182280704221518568893384466448839089670", "120435722638721370935691190501569981545", "288961117767715855422939441556262966579", "22997619993064488372263118631628684631", "247303866414399357566020699537269283774"], "threshold":0.9}, "id":"ASB-A-515158597-44f27af2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}, {"deprecated":false, "digest":{"line_hashes":["67512861029338814249349861885314635053", "290156515777081318189778133334877633745", "127925059051352371839438547349036061467"], "threshold":0.9}, "id":"ASB-A-515158597-5c3291b9", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"289882715831773007102488547891573017155", "length":715}, "id":"ASB-A-515158597-7ef18448", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"reapplyAllPoliciesOnBootLocked"}}, {"deprecated":false, "digest":{"function_hash":"185959690768177997466468579407855435738", "length":3837}, "id":"ASB-A-515158597-adc4d87c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setPermissionGrantState"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-10-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60"], "severity":"High", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["67512861029338814249349861885314635053", "290156515777081318189778133334877633745", "127925059051352371839438547349036061467"], "threshold":0.9}, "id":"ASB-A-515158597-13ed2dc8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"289882715831773007102488547891573017155", "length":715}, "id":"ASB-A-515158597-22cfd78d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"reapplyAllPoliciesOnBootLocked"}}, {"deprecated":false, "digest":{"line_hashes":["71387856242766300111474108755639060906", "245722315977399161983952543873526432790", "131604536729388262005348928524854859898", "182280704221518568893384466448839089670", "120435722638721370935691190501569981545", "288961117767715855422939441556262966579", "22997619993064488372263118631628684631", "247303866414399357566020699537269283774"], "threshold":0.9}, "id":"ASB-A-515158597-5b7d299b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"286901813323477361416805740705243665528", "length":3389}, "id":"ASB-A-515158597-837489dd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setPermissionGrantState"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-10-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5"], "severity":"High", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"105530994649535162782177526453052955785", "length":3354}, "id":"ASB-A-515158597-573b3ff7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setPermissionGrantState"}}, {"deprecated":false, "digest":{"function_hash":"101408601063527151196425862634223347783", "length":698}, "id":"ASB-A-515158597-7aebade5", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"reapplyAllPoliciesOnBootLocked"}}, {"deprecated":false, "digest":{"line_hashes":["67512861029338814249349861885314635053", "290156515777081318189778133334877633745", "127925059051352371839438547349036061467"], "threshold":0.9}, "id":"ASB-A-515158597-813e470e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"line_hashes":["71387856242766300111474108755639060906", "245722315977399161983952543873526432790", "131604536729388262005348928524854859898", "303055045182444199920398436940678675023", "120435722638721370935691190501569981545", "288961117767715855422939441556262966579", "22997619993064488372263118631628684631", "247303866414399357566020699537269283774"], "threshold":0.9}, "id":"ASB-A-515158597-e81535cb", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-10-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994"], "severity":"High", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["67512861029338814249349861885314635053", "290156515777081318189778133334877633745", "127925059051352371839438547349036061467"], "threshold":0.9}, "id":"ASB-A-515158597-7baa0302", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"line_hashes":["71387856242766300111474108755639060906", "245722315977399161983952543873526432790", "131604536729388262005348928524854859898", "303055045182444199920398436940678675023", "120435722638721370935691190501569981545", "288961117767715855422939441556262966579", "22997619993064488372263118631628684631", "247303866414399357566020699537269283774"], "threshold":0.9}, "id":"ASB-A-515158597-87d388da", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"302280238773157148435720193895737547847", "length":3292}, "id":"ASB-A-515158597-93165793", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setPermissionGrantState"}}, {"deprecated":false, "digest":{"function_hash":"101408601063527151196425862634223347783", "length":698}, "id":"ASB-A-515158597-f4d956bc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"reapplyAllPoliciesOnBootLocked"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-10-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4"], "severity":"High", "spl":"2026-10-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["99959481176727584204489406590511938161", "139814659820484636508263181494233403878", "233905006612110556967474936699273831191", "15645313722734130202496151787745546194", "12717694282970908182014466446689603566", "288961117767715855422939441556262966579", "22997619993064488372263118631628684631", "247303866414399357566020699537269283774"], "threshold":0.9}, "id":"ASB-A-515158597-19a3fcda", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}}, {"deprecated":false, "digest":{"function_hash":"138360623705418565317349113311700699865", "length":651}, "id":"ASB-A-515158597-369936f0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java", "function":"reapplyAllPoliciesLocked"}}, {"deprecated":false, "digest":{"line_hashes":["67512861029338814249349861885314635053", "290156515777081318189778133334877633745", "127925059051352371839438547349036061467"], "threshold":0.9}, "id":"ASB-A-515158597-5d392116", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"181043420025488049292628495150379739863", "length":3399}, "id":"ASB-A-515158597-b8d6f07b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4", "target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java", "function":"setPermissionGrantState"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-10-01"}]}