{"id":"ASB-A-396667508","details":"In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-396667508","CVE-2025-48648"],"modified":"2026-06-24T15:00:40.818157658Z","published":"2026-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-06-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"signature_version":"v1","id":"ASB-A-396667508-09e9399d","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["311776075868199209908180593235021278247","173554188953509075021848555997114625841","30994244569721521029653103736234205919","16544848603399734777459420411359972243","69187395976085701101404452460821305564","107330269270955045944742671467092557026","5057675959711498362234534126275630108","82010185885517143293113145326211704617","242529682537384182506986366557682501806","221944401727185269755334866930184879132","158448676480102414027779369708045930325","156920046477798560374823902624051824252","273027613730394784394737295736963397348","104424195872113355434228402279043544550","156233372356047225633113731636314392279","37427652773195948809491513767979418093","93166199624803918610661430068480261783","171498246101345202195297849406128970206","59795174511389018878761370653469910317","300043298138394808906312351494962799994","248496070369677747540641344587024256709","168516352214166090808396299173109141010","294448047507203347484002755347583574683","280256673906256791922308082785999670777","72694666756546133538567949547702548006"]},"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4"},{"signature_version":"v1","id":"ASB-A-396667508-19fd929d","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","signature_type":"Function","digest":{"length":345,"function_hash":"50137030720129843182424868869123684399"},"target":{"function":"areNotificationsEnabledForPackage","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"signature_version":"v1","id":"ASB-A-396667508-424b8dfd","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","signature_type":"Function","digest":{"length":480,"function_hash":"231246527256660435838079530375010976262"},"target":{"function":"getConversationNotificationChannel","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"deprecated":false,"id":"ASB-A-396667508-4e9b8e68","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","signature_version":"v1","digest":{"length":595,"function_hash":"207777736296645912941392049263076360237"},"target":{"function":"resolveNotificationUid","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"signature_type":"Function"},{"signature_version":"v1","id":"ASB-A-396667508-6e09ba0a","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","signature_type":"Function","digest":{"function_hash":"208068871326447281625678211215124308479","length":1420},"target":{"function":"setup","file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"deprecated":false},{"signature_version":"v1","id":"ASB-A-396667508-8030a6db","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","signature_type":"Function","digest":{"length":295,"function_hash":"305445064151357916036679857594399755156"},"target":{"function":"checkCallerIsSameApp","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"deprecated":false,"id":"ASB-A-396667508-db64af6e","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","signature_version":"v1","digest":{"length":320,"function_hash":"34004467386491868909730786709998970328"},"target":{"function":"getEffectsSuppressor","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"signature_type":"Function"},{"deprecated":false,"id":"ASB-A-396667508-e1774c06","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["167501126716018587119275499810791912118","318486943131436126345940480897073881866","143651495922578221084417533520456015137","212789153438999280831028487049194161453","128300056028351732686437431211261181429","330860463999469096656304940898754894442","127257735946869828535420129665154153304","202405628641787956841393280434915673904","273644883567035735326125364280467292564","39610213993419028309327006183383145251","17413738809138397389695830717253062469","180606999226419907722329401448844541964","84933873814762606350458618195785045928","13797188950598143719055117428339577816","326241967822020216091373510351404593739","40041870310826370440010009241901796207","72243195534743323844656786369263517528","255286961527945673535438177890782077057"]},"target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"signature_version":"v1"},{"signature_version":"v1","id":"ASB-A-396667508-f5fc6cd4","deprecated":false,"signature_type":"Function","digest":{"length":2181,"function_hash":"194054172599855610475842191744319332234"},"target":{"function":"validateAutomaticZenRule","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4"}],"types":["DoS"],"spl":"2026-06-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","https://android.googlesource.com/platform/frameworks/base/+/8a638b787a7d2f4aaf3cce21333fa7a42514dfce"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-396667508.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-06-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"signature_version":"v1","id":"ASB-A-396667508-13f7633b","deprecated":false,"signature_type":"Function","digest":{"length":1323,"function_hash":"53921670342947996092453171383702712902"},"target":{"function":"setup","file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"},{"signature_version":"v1","id":"ASB-A-396667508-2ec6e55c","source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["311776075868199209908180593235021278247","173554188953509075021848555997114625841","30994244569721521029653103736234205919","16544848603399734777459420411359972243","69187395976085701101404452460821305564","107330269270955045944742671467092557026","5057675959711498362234534126275630108","82010185885517143293113145326211704617","242529682537384182506986366557682501806","221944401727185269755334866930184879132","158448676480102414027779369708045930325","156920046477798560374823902624051824252","273027613730394784394737295736963397348","104424195872113355434228402279043544550","156233372356047225633113731636314392279","37427652773195948809491513767979418093","93166199624803918610661430068480261783","171498246101345202195297849406128970206","59795174511389018878761370653469910317","300043298138394808906312351494962799994","248496070369677747540641344587024256709","168516352214166090808396299173109141010","294448047507203347484002755347583574683","280256673906256791922308082785999670777","72694666756546133538567949547702548006"]},"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"signature_version":"v1","id":"ASB-A-396667508-41730810","source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295","signature_type":"Function","digest":{"length":320,"function_hash":"34004467386491868909730786709998970328"},"target":{"function":"getEffectsSuppressor","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"signature_version":"v1","id":"ASB-A-396667508-9332bda0","deprecated":false,"signature_type":"Function","digest":{"function_hash":"207777736296645912941392049263076360237","length":595},"target":{"function":"resolveNotificationUid","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"},{"deprecated":false,"id":"ASB-A-396667508-b541f173","source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295","signature_version":"v1","digest":{"length":295,"function_hash":"305445064151357916036679857594399755156"},"target":{"function":"checkCallerIsSameApp","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"signature_type":"Function"},{"signature_version":"v1","id":"ASB-A-396667508-c09abf9f","deprecated":false,"signature_type":"Function","digest":{"function_hash":"37690238828963878000712913465981266033","length":353},"target":{"function":"areNotificationsEnabledForPackage","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"},{"signature_version":"v1","id":"ASB-A-396667508-d3f7806f","deprecated":false,"signature_type":"Function","digest":{"function_hash":"21493660492147640206822512447945319315","length":1572},"target":{"function":"validateAutomaticZenRule","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"},{"signature_version":"v1","id":"ASB-A-396667508-d61aa2a6","deprecated":false,"signature_type":"Function","digest":{"length":480,"function_hash":"231246527256660435838079530375010976262"},"target":{"function":"getConversationNotificationChannel","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"},{"signature_version":"v1","id":"ASB-A-396667508-fa51bb87","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["167501126716018587119275499810791912118","318486943131436126345940480897073881866","143651495922578221084417533520456015137","212789153438999280831028487049194161453","128300056028351732686437431211261181429","330860463999469096656304940898754894442","127257735946869828535420129665154153304","202405628641787956841393280434915673904","273644883567035735326125364280467292564","39610213993419028309327006183383145251","17413738809138397389695830717253062469","180606999226419907722329401448844541964","84933873814762606350458618195785045928","13797188950598143719055117428339577816","326241967822020216091373510351404593739","34501281023628935063712763780394219378","323289490898469783465079980922881859150","61151563059221844998895245381018526678"]},"target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"}],"types":["DoS"],"spl":"2026-06-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-396667508.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-06-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"deprecated":false,"id":"ASB-A-396667508-24ce6e6a","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","signature_type":"Function","digest":{"length":320,"function_hash":"34004467386491868909730786709998970328"},"target":{"function":"getEffectsSuppressor","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"signature_version":"v1"},{"deprecated":false,"id":"ASB-A-396667508-30b926fb","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","signature_type":"Function","digest":{"length":1420,"function_hash":"208068871326447281625678211215124308479"},"target":{"function":"setup","file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"signature_version":"v1"},{"signature_version":"v1","id":"ASB-A-396667508-3d880384","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["311776075868199209908180593235021278247","173554188953509075021848555997114625841","30994244569721521029653103736234205919","16544848603399734777459420411359972243","69187395976085701101404452460821305564","107330269270955045944742671467092557026","5057675959711498362234534126275630108","82010185885517143293113145326211704617","242529682537384182506986366557682501806","221944401727185269755334866930184879132","158448676480102414027779369708045930325","156920046477798560374823902624051824252","273027613730394784394737295736963397348","104424195872113355434228402279043544550","156233372356047225633113731636314392279","37427652773195948809491513767979418093","93166199624803918610661430068480261783","171498246101345202195297849406128970206","59795174511389018878761370653469910317","300043298138394808906312351494962799994","248496070369677747540641344587024256709","168516352214166090808396299173109141010","294448047507203347484002755347583574683","280256673906256791922308082785999670777","72694666756546133538567949547702548006"]},"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4"},{"deprecated":false,"id":"ASB-A-396667508-4a9e7b75","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","signature_version":"v1","digest":{"function_hash":"207777736296645912941392049263076360237","length":595},"target":{"function":"resolveNotificationUid","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"signature_type":"Function"},{"signature_version":"v1","id":"ASB-A-396667508-74b23183","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","signature_type":"Function","digest":{"length":345,"function_hash":"50137030720129843182424868869123684399"},"target":{"function":"areNotificationsEnabledForPackage","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"deprecated":false,"id":"ASB-A-396667508-83fd7c6e","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","signature_type":"Function","digest":{"length":1291,"function_hash":"59191339780957130539963275365137952241"},"target":{"function":"validateAutomaticZenRule","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"signature_version":"v1"},{"signature_version":"v1","id":"ASB-A-396667508-c37c533e","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["167501126716018587119275499810791912118","318486943131436126345940480897073881866","143651495922578221084417533520456015137","212789153438999280831028487049194161453","128300056028351732686437431211261181429","330860463999469096656304940898754894442","127257735946869828535420129665154153304","202405628641787956841393280434915673904","273644883567035735326125364280467292564","39610213993419028309327006183383145251","17413738809138397389695830717253062469","180606999226419907722329401448844541964","84933873814762606350458618195785045928","13797188950598143719055117428339577816","326241967822020216091373510351404593739","40041870310826370440010009241901796207","72243195534743323844656786369263517528","255286961527945673535438177890782077057"]},"target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"deprecated":false},{"signature_version":"v1","id":"ASB-A-396667508-e5c10250","deprecated":false,"signature_type":"Function","digest":{"length":295,"function_hash":"305445064151357916036679857594399755156"},"target":{"function":"checkCallerIsSameApp","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4"},{"signature_version":"v1","id":"ASB-A-396667508-eb69edfc","deprecated":false,"signature_type":"Function","digest":{"length":480,"function_hash":"231246527256660435838079530375010976262"},"target":{"function":"getConversationNotificationChannel","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4"}],"types":["DoS"],"spl":"2026-06-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-396667508.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-06-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"signature_version":"v1","id":"ASB-A-396667508-120238b0","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["311776075868199209908180593235021278247","173554188953509075021848555997114625841","30994244569721521029653103736234205919","16544848603399734777459420411359972243","69187395976085701101404452460821305564","230858874161068579965200542526066464547","248073214681357485477302217045111523716","184646465235922378966532768242104740060","320705647374390279630953455366129305776","259719614258695601559025597029121012157","105537389429175060221598269746763207726","110570907393677328033717206344777840785","36817893150851478897978189590751813895","168516352214166090808396299173109141010","294448047507203347484002755347583574683","280256673906256791922308082785999670777","72694666756546133538567949547702548006"]},"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705"},{"signature_version":"v1","id":"ASB-A-396667508-49372ecf","source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705","signature_type":"Function","digest":{"function_hash":"305445064151357916036679857594399755156","length":295},"target":{"function":"checkCallerIsSameApp","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"signature_version":"v1","id":"ASB-A-396667508-bbeaba4e","deprecated":false,"signature_type":"Function","digest":{"length":1323,"function_hash":"53921670342947996092453171383702712902"},"target":{"function":"setup","file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705"},{"signature_version":"v1","id":"ASB-A-396667508-db496b4d","deprecated":false,"signature_type":"Function","digest":{"length":480,"function_hash":"231246527256660435838079530375010976262"},"target":{"function":"getConversationNotificationChannel","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705"},{"signature_version":"v1","id":"ASB-A-396667508-eedb3b3a","deprecated":false,"signature_type":"Line","digest":{"threshold":0.9,"line_hashes":["167501126716018587119275499810791912118","318486943131436126345940480897073881866","143651495922578221084417533520456015137","31009025591479672692194662111776868673","252160476245399169130789295909641112834","155877341641905023578416530582262621472","109056397751080462341968595360174433210","252237268444944532130811304789253907201","139197936973216126785468848020887968055","120046709075674548549695691740964987837","155821714203419777662362063457669415519","311602187478921553778809534058826673155","67774471323848770003077394129421048957","266289982402771435401118611319514875314","80722307318898221249257415238934053817","289359513436208212386337049230003429018","339718667904611365457682021892769363550","330338419510567171601645924086002668144","68947804206987492735004414115348543235","34501281023628935063712763780394219378","323289490898469783465079980922881859150","61151563059221844998895245381018526678"]},"target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705"},{"signature_version":"v1","id":"ASB-A-396667508-fbd0836c","source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705","signature_type":"Function","digest":{"length":353,"function_hash":"37690238828963878000712913465981266033"},"target":{"function":"areNotificationsEnabledForPackage","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false}],"types":["DoS"],"spl":"2026-06-01","fixes":["https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-396667508.json"}}],"schema_version":"1.7.5"}