{"id":"ASB-A-372678095","details":"In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-372678095","CVE-2025-26429"],"modified":"2026-04-17T15:55:28.020024Z","published":"2025-05-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-05-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/0f3c01c326b6966590c652adec5baa61351756e4"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15-next:0"},{"fixed":"15-next:2025-05-01"}]}],"versions":["15-next"],"ecosystem_specific":{"severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/eec34e2716bfa613be30b0a0b9a173e2005a6c00"],"vanir_signatures":[{"digest":{"length":809,"function_hash":"337851167433459298967354477856127863738"},"id":"ASB-A-372678095-3de71318","signature_version":"v1","signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/eec34e2716bfa613be30b0a0b9a173e2005a6c00","deprecated":false,"target":{"function":"collectOps","file":"services/core/java/com/android/server/appop/AppOpsService.java"}},{"digest":{"threshold":0.9,"line_hashes":["71952651776487346660823485887614510747","115918072684645835693082267120199065287","278258228105977721164706192820564684914","198485944586267716548559390678997654625","172218190940938305218596134347684931315","236517670561950720737636693102508756842","184464620630367572333039989042782175192","236206418025131006374802593789565846969","247831937926152626931044641286737104696","217477771717466271752611718701508366803","241109627515707857017823944220942304205","236206418025131006374802593789565846969","247831937926152626931044641286737104696","69030975499120734252832411346976782828","334579910967147542961837984257354475710","170951001934090677966517865211278506298","97555979122857469897748567592303905125","160642358394123752445688812791315287382"]},"id":"ASB-A-372678095-47b1a736","signature_version":"v1","signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/eec34e2716bfa613be30b0a0b9a173e2005a6c00","deprecated":false,"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"}}],"spl":"2025-05-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-372678095.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-05-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/767b4f7c3657fa29548a4464da6790dbca8aebda"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["71952651776487346660823485887614510747","115918072684645835693082267120199065287","278258228105977721164706192820564684914","198485944586267716548559390678997654625","172218190940938305218596134347684931315","236517670561950720737636693102508756842","184464620630367572333039989042782175192","236206418025131006374802593789565846969","247831937926152626931044641286737104696","217477771717466271752611718701508366803","241109627515707857017823944220942304205","236206418025131006374802593789565846969","247831937926152626931044641286737104696","69030975499120734252832411346976782828","334579910967147542961837984257354475710","170951001934090677966517865211278506298","97555979122857469897748567592303905125","160642358394123752445688812791315287382"]},"id":"ASB-A-372678095-2166cc00","signature_version":"v1","signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/767b4f7c3657fa29548a4464da6790dbca8aebda","deprecated":false,"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"}},{"digest":{"length":809,"function_hash":"337851167433459298967354477856127863738"},"id":"ASB-A-372678095-c2f03341","signature_version":"v1","signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/767b4f7c3657fa29548a4464da6790dbca8aebda","deprecated":false,"target":{"function":"collectOps","file":"services/core/java/com/android/server/appop/AppOpsService.java"}}],"spl":"2025-05-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-372678095.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-05-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8e7990cecce808d9dd9465bb8526211b0086e881"],"vanir_signatures":[{"digest":{"length":838,"function_hash":"115722328755242842571934418617486325501"},"id":"ASB-A-372678095-7b085345","signature_version":"v1","signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/8e7990cecce808d9dd9465bb8526211b0086e881","deprecated":false,"target":{"function":"collectOps","file":"services/core/java/com/android/server/appop/AppOpsService.java"}},{"digest":{"threshold":0.9,"line_hashes":["239171083149991810069156845449762651941","332699549677386690953477719385212091116","205564394585243236353206476146237353732","198485944586267716548559390678997654625","172218190940938305218596134347684931315","236517670561950720737636693102508756842","184464620630367572333039989042782175192","312127215108962139457798752153198999495","157527308637125204989989890482974640699","45266889576682936642418812902781308146","253772115497832552708570951606569109011","264990296039589826285566544685433618275","322082137789406113131651207645207994143","215423790674367581878210316172652184642","179512474220682230527776989648646180959","170951001934090677966517865211278506298","97555979122857469897748567592303905125","160642358394123752445688812791315287382"]},"id":"ASB-A-372678095-b9dd8c82","signature_version":"v1","signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/8e7990cecce808d9dd9465bb8526211b0086e881","deprecated":false,"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"}}],"spl":"2025-05-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-372678095.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-05-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b0fb67bb0c3523fd0c59b76e83e356ea244c276b"],"vanir_signatures":[{"digest":{"length":779,"function_hash":"54244223092258252841458286859193254355"},"id":"ASB-A-372678095-914ef889","signature_version":"v1","signature_type":"Function","source":"https://android.googlesource.com/platform/frameworks/base/+/b0fb67bb0c3523fd0c59b76e83e356ea244c276b","deprecated":false,"target":{"function":"collectOps","file":"services/core/java/com/android/server/appop/AppOpsService.java"}},{"digest":{"threshold":0.9,"line_hashes":["55029505406583542871309047594599843770","62436470753535400835099673739506981236","251169751863556473748939695500833632328","198485944586267716548559390678997654625","172218190940938305218596134347684931315","236517670561950720737636693102508756842","184464620630367572333039989042782175192","158892665326766544084637425482934174952","337473101324785300981722906924860473506","250649295467920369279721726719756952339","259143427029110884523456883122189804226","289059269598020453562879917806168574476","173065293936839409610542187442158767219","88877441754748984667401630493882754800","106233699318394501404791780087749942113","170951001934090677966517865211278506298","97555979122857469897748567592303905125","160642358394123752445688812791315287382"]},"id":"ASB-A-372678095-cf1baa87","signature_version":"v1","signature_type":"Line","source":"https://android.googlesource.com/platform/frameworks/base/+/b0fb67bb0c3523fd0c59b76e83e356ea244c276b","deprecated":false,"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"}}],"spl":"2025-05-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-372678095.json"}}],"schema_version":"1.7.5"}