{"id":"ASB-A-527038421", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-04T16:48:29.960526221Z", "aliases":["CVE-2026-58979", "A-527038421"], "details":"In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3b4aad43843d0b10d4cdedcd6905b4b8b5ea0607"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["249309817643782379465478961047643927765", "223521962881983595675711839722904548260", "19678127559003501492536837222623819979", "78229633562349872921851902069702094313", "279916090211245221095979722016736977644", "206838325010810148846526824119169754973", "118939009967577808194298079904015945161", "105135349804760838859480469610730392589", "277167926992506182066285464212271669244", "239023834931436034751817181904137659087"], "threshold":0.9}, "id":"ASB-A-527038421-0906bc21", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3b4aad43843d0b10d4cdedcd6905b4b8b5ea0607", "target":{"file":"services/core/java/com/android/server/wm/PresentationController.java"}}, {"deprecated":false, "digest":{"function_hash":"40243082470080854787806834916895024560", "length":1300}, "id":"ASB-A-527038421-99c1eaee", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/3b4aad43843d0b10d4cdedcd6905b4b8b5ea0607", "target":{"file":"services/core/java/com/android/server/wm/PresentationController.java", "function":"canPresent"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ec88ac8e2fc5a67d745907f0bb8d27cc5ceac6b7"], "severity":"High", "spl":"2026-11-01", "types":["EoP"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"179926471240828294546952046396406015179", "length":1088}, "id":"ASB-A-527038421-0a1041ed", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ec88ac8e2fc5a67d745907f0bb8d27cc5ceac6b7", "target":{"file":"services/core/java/com/android/server/wm/PresentationController.java", "function":"canPresent"}}, {"deprecated":false, "digest":{"line_hashes":["249309817643782379465478961047643927765", "223521962881983595675711839722904548260", "155372890749952331468941875267420036444", "238059584153962421690127047454601774012", "155907099151401795935103625087990243997", "49037834033598096853251754760236272046", "105135349804760838859480469610730392589", "277167926992506182066285464212271669244", "239023834931436034751817181904137659087"], "threshold":0.9}, "id":"ASB-A-527038421-7bd967db", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ec88ac8e2fc5a67d745907f0bb8d27cc5ceac6b7", "target":{"file":"services/core/java/com/android/server/wm/PresentationController.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}