{"id":"ASB-A-527037031", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-58951", "A-527037031"], "details":"In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f80e7d72ee06b293f82730860989b4940cff5e18"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"23394056667128158216516034766682806693", "length":446}, "id":"ASB-A-527037031-7abc18a4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f80e7d72ee06b293f82730860989b4940cff5e18", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java", "function":"getTaskInfo"}}, {"deprecated":false, "digest":{"line_hashes":["69174092282766384547908324781490193815", "18306198786839114041852296361960324349", "189711996945790028369893960436888408465", "211744255910082531162263375605353976766", "58281556621955240468588132249463076511", "92146947252268267278036319613875092516", "125013984104910511255005768693803549288", "293839546183206198227894606151154351270", "257857402019118627350981832294002714675", "67625688583437366494376325445906808318"], "threshold":0.9}, "id":"ASB-A-527037031-95fb62ca", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f80e7d72ee06b293f82730860989b4940cff5e18", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"}}, {"deprecated":false, "digest":{"function_hash":"329305421849309451129452767938588231086", "length":2050}, "id":"ASB-A-527037031-b7aba6b8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f80e7d72ee06b293f82730860989b4940cff5e18", "target":{"file":"services/core/java/com/android/server/wm/Task.java", "function":"trimIneffectiveInfo"}}, {"deprecated":false, "digest":{"line_hashes":["31407212248238245207223337912844507848", "231471409976493454407667399354900414954", "231513752127828628868018585052900887408", "53128861105548090031079767117330558463"], "threshold":0.9}, "id":"ASB-A-527037031-ef842c07", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/f80e7d72ee06b293f82730860989b4940cff5e18", "target":{"file":"services/core/java/com/android/server/wm/Task.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/86a6ebc70eee16c5f75831e2b75cb29939244196"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"137696752643782756070195193960495535448", "length":1929}, "id":"ASB-A-527037031-10467a8b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/86a6ebc70eee16c5f75831e2b75cb29939244196", "target":{"file":"services/core/java/com/android/server/wm/Task.java", "function":"trimIneffectiveInfo"}}, {"deprecated":false, "digest":{"line_hashes":["31407212248238245207223337912844507848", "231471409976493454407667399354900414954", "231513752127828628868018585052900887408", "53128861105548090031079767117330558463"], "threshold":0.9}, "id":"ASB-A-527037031-2518b2ec", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/86a6ebc70eee16c5f75831e2b75cb29939244196", "target":{"file":"services/core/java/com/android/server/wm/Task.java"}}, {"deprecated":false, "digest":{"line_hashes":["69174092282766384547908324781490193815", "18306198786839114041852296361960324349", "189711996945790028369893960436888408465", "211744255910082531162263375605353976766", "338185822325835282635100481254422254974", "118599825313511125171041053075850265953", "165831923789944329184428295187134769902", "293839546183206198227894606151154351270", "257857402019118627350981832294002714675", "67625688583437366494376325445906808318"], "threshold":0.9}, "id":"ASB-A-527037031-447daf88", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/86a6ebc70eee16c5f75831e2b75cb29939244196", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"}}, {"deprecated":false, "digest":{"function_hash":"39857382199862839908673086156016290601", "length":429}, "id":"ASB-A-527037031-feae8bae", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/86a6ebc70eee16c5f75831e2b75cb29939244196", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java", "function":"getTaskInfo"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/13713fd0831d06c0688e4903c3932afbb54971c6"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["31407212248238245207223337912844507848", "231471409976493454407667399354900414954", "231513752127828628868018585052900887408", "53128861105548090031079767117330558463"], "threshold":0.9}, "id":"ASB-A-527037031-300a05ec", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/13713fd0831d06c0688e4903c3932afbb54971c6", "target":{"file":"services/core/java/com/android/server/wm/Task.java"}}, {"deprecated":false, "digest":{"function_hash":"104806881104888446029413400535391390865", "length":2059}, "id":"ASB-A-527037031-52530ae1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/13713fd0831d06c0688e4903c3932afbb54971c6", "target":{"file":"services/core/java/com/android/server/wm/Task.java", "function":"trimIneffectiveInfo"}}, {"deprecated":false, "digest":{"line_hashes":["69174092282766384547908324781490193815", "18306198786839114041852296361960324349", "189711996945790028369893960436888408465", "211744255910082531162263375605353976766", "338185822325835282635100481254422254974", "118599825313511125171041053075850265953", "165831923789944329184428295187134769902", "293839546183206198227894606151154351270", "257857402019118627350981832294002714675", "67625688583437366494376325445906808318"], "threshold":0.9}, "id":"ASB-A-527037031-d7835b8a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/13713fd0831d06c0688e4903c3932afbb54971c6", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"}}, {"deprecated":false, "digest":{"function_hash":"39857382199862839908673086156016290601", "length":429}, "id":"ASB-A-527037031-f428177d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/13713fd0831d06c0688e4903c3932afbb54971c6", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java", "function":"getTaskInfo"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2603b639456df498018b5d3088a21e04cee65a04"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["69174092282766384547908324781490193815", "18306198786839114041852296361960324349", "189711996945790028369893960436888408465", "211744255910082531162263375605353976766", "338185822325835282635100481254422254974", "118599825313511125171041053075850265953", "165831923789944329184428295187134769902", "293839546183206198227894606151154351270", "257857402019118627350981832294002714675", "67625688583437366494376325445906808318"], "threshold":0.9}, "id":"ASB-A-527037031-0ca718e6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2603b639456df498018b5d3088a21e04cee65a04", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"}}, {"deprecated":false, "digest":{"line_hashes":["31407212248238245207223337912844507848", "231471409976493454407667399354900414954", "231513752127828628868018585052900887408", "53128861105548090031079767117330558463"], "threshold":0.9}, "id":"ASB-A-527037031-111e43de", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2603b639456df498018b5d3088a21e04cee65a04", "target":{"file":"services/core/java/com/android/server/wm/Task.java"}}, {"deprecated":false, "digest":{"function_hash":"39857382199862839908673086156016290601", "length":429}, "id":"ASB-A-527037031-38ec3260", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2603b639456df498018b5d3088a21e04cee65a04", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java", "function":"getTaskInfo"}}, {"deprecated":false, "digest":{"function_hash":"104806881104888446029413400535391390865", "length":2059}, "id":"ASB-A-527037031-68b7f7fd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2603b639456df498018b5d3088a21e04cee65a04", "target":{"file":"services/core/java/com/android/server/wm/Task.java", "function":"trimIneffectiveInfo"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/eebb44a69a12873f8ff47750895b6cb3617db80e"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"23394056667128158216516034766682806693", "length":446}, "id":"ASB-A-527037031-16d39a2d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/eebb44a69a12873f8ff47750895b6cb3617db80e", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java", "function":"getTaskInfo"}}, {"deprecated":false, "digest":{"function_hash":"329305421849309451129452767938588231086", "length":2050}, "id":"ASB-A-527037031-1b705332", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/eebb44a69a12873f8ff47750895b6cb3617db80e", "target":{"file":"services/core/java/com/android/server/wm/Task.java", "function":"trimIneffectiveInfo"}}, {"deprecated":false, "digest":{"line_hashes":["31407212248238245207223337912844507848", "231471409976493454407667399354900414954", "231513752127828628868018585052900887408", "53128861105548090031079767117330558463"], "threshold":0.9}, "id":"ASB-A-527037031-325f7b7c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/eebb44a69a12873f8ff47750895b6cb3617db80e", "target":{"file":"services/core/java/com/android/server/wm/Task.java"}}, {"deprecated":false, "digest":{"line_hashes":["69174092282766384547908324781490193815", "18306198786839114041852296361960324349", "189711996945790028369893960436888408465", "211744255910082531162263375605353976766", "58281556621955240468588132249463076511", "92146947252268267278036319613875092516", "125013984104910511255005768693803549288", "293839546183206198227894606151154351270", "257857402019118627350981832294002714675", "67625688583437366494376325445906808318"], "threshold":0.9}, "id":"ASB-A-527037031-f0b2afc1", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/eebb44a69a12873f8ff47750895b6cb3617db80e", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1081dbe4a05beec3e65def93ca9cfc0cfba0f7da"], "severity":"High", "spl":"2026-11-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"39857382199862839908673086156016290601", "length":429}, "id":"ASB-A-527037031-15df138a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1081dbe4a05beec3e65def93ca9cfc0cfba0f7da", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java", "function":"getTaskInfo"}}, {"deprecated":false, "digest":{"line_hashes":["31407212248238245207223337912844507848", "231471409976493454407667399354900414954", "231513752127828628868018585052900887408", "53128861105548090031079767117330558463"], "threshold":0.9}, "id":"ASB-A-527037031-1afc0a21", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1081dbe4a05beec3e65def93ca9cfc0cfba0f7da", "target":{"file":"services/core/java/com/android/server/wm/Task.java"}}, {"deprecated":false, "digest":{"function_hash":"137696752643782756070195193960495535448", "length":1929}, "id":"ASB-A-527037031-6b5a234b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1081dbe4a05beec3e65def93ca9cfc0cfba0f7da", "target":{"file":"services/core/java/com/android/server/wm/Task.java", "function":"trimIneffectiveInfo"}}, {"deprecated":false, "digest":{"line_hashes":["69174092282766384547908324781490193815", "18306198786839114041852296361960324349", "189711996945790028369893960436888408465", "211744255910082531162263375605353976766", "338185822325835282635100481254422254974", "118599825313511125171041053075850265953", "165831923789944329184428295187134769902", "293839546183206198227894606151154351270", "257857402019118627350981832294002714675", "67625688583437366494376325445906808318"], "threshold":0.9}, "id":"ASB-A-527037031-74021f21", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1081dbe4a05beec3e65def93ca9cfc0cfba0f7da", "target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}