{"id":"ASB-A-525133623", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-58837", "A-525133623"], "details":"In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/32919fe0590ae6dab8e16a9af4fa75b718089eb2", "https://android.googlesource.com/platform/frameworks/base/+/84f2a62a6059116949597baa9f17226b8c996bf3", "https://android.googlesource.com/platform/frameworks/base/+/59d9f7b361c4bc7af2bec3dd6730a212dae89bc8"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["255156781201081225281859411603687717092", "293070987469983026754223518943974456879", "236473211968419380036099613244031547464", "308040606055537248334691826648939412914", "189840225009124958682423299511710245059", "99253844324105750832328122535284829500", "176993688453419779652937881466580784893", "118787928366390060394002057044021199941", "285688557680339939245191869683462369461", "34975149383398808578892052138750963925", "239297346265700406582464567790896056868", "329714276799701309232429106497211853848", "236910305148198124982805683904494209093", "17412476527129308768591112579098934525", "247884442122427535215246291244743870718", "297419764752476220762748647658565150574", "254322072292453387950256988307252522684", "5098574227328947469600347928874499715", "205146513068116257240054971646804267288"], "threshold":0.9}, "id":"ASB-A-525133623-256871e3", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/32919fe0590ae6dab8e16a9af4fa75b718089eb2", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"207929354715145024680966856235153426049", "length":674}, "id":"ASB-A-525133623-604b9b7f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/32919fe0590ae6dab8e16a9af4fa75b718089eb2", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java", "function":"associate"}}, {"deprecated":false, "digest":{"function_hash":"322212632678466247116401215485355889299", "length":1235}, "id":"ASB-A-525133623-778d9bee", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/84f2a62a6059116949597baa9f17226b8c996bf3", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java", "function":"associate"}}, {"deprecated":false, "digest":{"line_hashes":["88097795025190906598419229617024522463", "205136204361005634286915637054227791528", "103288127626041577198270278362176333206", "52665934682436694898665501987200778068", "25699583441627174877978878456555234235", "105826114046037305035978579635500210657", "181083594407065548247723782316228398183", "205487136278303960357644611506064067795", "98310130469283987562261388978648755122", "257193650944862988170818522074947997428", "52467946730781958153216541048215941512", "80348255877217338548350974936912624741", "251939309453932992910797904107522251274", "3955931896430825694984091434313537336", "184221937480058465391464904948738319936", "73693591890026691809236900550370277014", "192518439122396214295498939487556502912", "4338369658882217085758492973669655523"], "threshold":0.9}, "id":"ASB-A-525133623-976c68c7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/84f2a62a6059116949597baa9f17226b8c996bf3", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"}}, {"deprecated":false, "digest":{"line_hashes":["258761508731383338062245540982726913469", "66624188022379625068501346226040845899", "324398164463981134670368329703281555186", "294334225619865601991780228733152045900", "96135752743110172549510905654940698603", "229086868884248565292437370547018229698", "197664765353177713067384837741191421135", "165620453168173442316981697178505114276", "304957425510180507133218060659657714597"], "threshold":0.9}, "id":"ASB-A-525133623-b4c78f3f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/59d9f7b361c4bc7af2bec3dd6730a212dae89bc8", "target":{"file":"services/core/java/com/android/server/wm/BackgroundActivityStartController.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/35c87b62ed11c7ae4138680f0fc3e5c025e5742e"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"51287810560462348188484537280553425043", "length":351}, "id":"ASB-A-525133623-12915154", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/35c87b62ed11c7ae4138680f0fc3e5c025e5742e", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java", "function":"associate"}}, {"deprecated":false, "digest":{"line_hashes":["168877967087863053870882480064379440127", "236578004079345091192294599369112989513", "191971767302067486367683118839563872675"], "threshold":0.9}, "id":"ASB-A-525133623-8f4890cf", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/35c87b62ed11c7ae4138680f0fc3e5c025e5742e", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9d225e2295caac3ac1a12b9c9a4cc4982dc95ad0"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"29068247425018024254182592741349855385", "length":596}, "id":"ASB-A-525133623-1f14c04a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9d225e2295caac3ac1a12b9c9a4cc4982dc95ad0", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java", "function":"associate"}}, {"deprecated":false, "digest":{"line_hashes":["73114256134889800685881944478806072288", "5098574227328947469600347928874499715", "205146513068116257240054971646804267288"], "threshold":0.9}, "id":"ASB-A-525133623-3704a413", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9d225e2295caac3ac1a12b9c9a4cc4982dc95ad0", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6e28696098cd74cb53b5b155bcef0ee0421fd6d0"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["73114256134889800685881944478806072288", "5098574227328947469600347928874499715", "205146513068116257240054971646804267288"], "threshold":0.9}, "id":"ASB-A-525133623-440da5fd", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6e28696098cd74cb53b5b155bcef0ee0421fd6d0", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"29068247425018024254182592741349855385", "length":596}, "id":"ASB-A-525133623-9b074b00", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/6e28696098cd74cb53b5b155bcef0ee0421fd6d0", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java", "function":"associate"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/312601eb27381c22aca7fb67a5b2a238e84645f2"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"207929354715145024680966856235153426049", "length":674}, "id":"ASB-A-525133623-72a381fd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/312601eb27381c22aca7fb67a5b2a238e84645f2", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java", "function":"associate"}}, {"deprecated":false, "digest":{"line_hashes":["254322072292453387950256988307252522684", "5098574227328947469600347928874499715", "205146513068116257240054971646804267288"], "threshold":0.9}, "id":"ASB-A-525133623-c85d506a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/312601eb27381c22aca7fb67a5b2a238e84645f2", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3667ae22044946a1ac4166969c281f96fd4efdad"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"51287810560462348188484537280553425043", "length":351}, "id":"ASB-A-525133623-73f6da19", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3667ae22044946a1ac4166969c281f96fd4efdad", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java", "function":"associate"}}, {"deprecated":false, "digest":{"line_hashes":["168877967087863053870882480064379440127", "236578004079345091192294599369112989513", "191971767302067486367683118839563872675"], "threshold":0.9}, "id":"ASB-A-525133623-886106d2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3667ae22044946a1ac4166969c281f96fd4efdad", "target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}