{"id":"ASB-A-281543351","details":"In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-281543351","CVE-2026-59008"],"modified":"2026-11-02T17:11:09.514081587Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"211318072260311163843113923133829554985","length":1420},"id":"ASB-A-281543351-05987da0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c9c04f595d904aff21ebdd67986b5a9250d6406a","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"setApplicationRestrictions"}},{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["301498066083663182628863673520228247864","104997068357892947757237010302939544677","243363565323553501550817353154413927248","84731709377475183296577555973772744279","23031151675285858949427054582207703380","322476890247886008795765985880236611224","142036694912208495280016163075122035923","231651472917796936300567924298911753058","165720907060463567974881280086468749577","136145168668719442673160873764216177177","132831946292049933711304198678708505462","232124807684297307563293725678044138016","1693210580421343794575933473723223526","219591593475994794802162696771360920162","179331476582465301947662591680083343067","97835455985896156180627963183863811908","163128951422547494852641933113485676640","117184083143677443903774130300134904653"]},"id":"ASB-A-281543351-65f31440","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c9c04f595d904aff21ebdd67986b5a9250d6406a"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c9c04f595d904aff21ebdd67986b5a9250d6406a"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-281543351.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"digest":{"function_hash":"155380206274187637560359198686814129758","length":1315},"id":"ASB-A-281543351-9f2fe952","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f7580c2f8ee95e4f00782ed8c1723fdfa03efc49","target":{"function":"setApplicationRestrictions","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false},{"id":"ASB-A-281543351-d006747e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f7580c2f8ee95e4f00782ed8c1723fdfa03efc49","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"line_hashes":["154079091873617040419716932993632036454","325747374602964068067104091483481064516","270374063380347850549185748710587946741","251812851855089251532965546011231901279","301498066083663182628863673520228247864","104997068357892947757237010302939544677","243363565323553501550817353154413927248","84731709377475183296577555973772744279","23031151675285858949427054582207703380","322476890247886008795765985880236611224","44059932035731310382507253441592859250","275353170412314842752212700654103826686","191772039468551958370256811737434370048","157199174091346150416134507888407439660","127888332903425331666803852534686701817","49165030303259782692761457352416831203","52846591566841198819274449032809410235","143210234346223914550456868347891703523","299329960328872765693377645990616110779","206128379537443019541294379444219462724","26414224145330728602411073707128744757"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f7580c2f8ee95e4f00782ed8c1723fdfa03efc49"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-281543351.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/598eddaabe731afbfb3c9265d36b637a346e5604","target":{"function":"setApplicationRestrictions","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"function_hash":"211318072260311163843113923133829554985","length":1420},"id":"ASB-A-281543351-044a1057","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/598eddaabe731afbfb3c9265d36b637a346e5604","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"line_hashes":["301498066083663182628863673520228247864","104997068357892947757237010302939544677","243363565323553501550817353154413927248","84731709377475183296577555973772744279","23031151675285858949427054582207703380","322476890247886008795765985880236611224","142036694912208495280016163075122035923","231651472917796936300567924298911753058","165720907060463567974881280086468749577","136145168668719442673160873764216177177","132831946292049933711304198678708505462","232124807684297307563293725678044138016","1693210580421343794575933473723223526","219591593475994794802162696771360920162","179331476582465301947662591680083343067","97835455985896156180627963183863811908","163128951422547494852641933113485676640","117184083143677443903774130300134904653"],"threshold":0.9},"id":"ASB-A-281543351-dcbf7255"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/598eddaabe731afbfb3c9265d36b637a346e5604"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-281543351.json"}}],"schema_version":"1.9.2"}