{"id":"ASB-A-396667508","details":"In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-396667508","CVE-2025-48648"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2026-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-06-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["311776075868199209908180593235021278247","173554188953509075021848555997114625841","30994244569721521029653103736234205919","16544848603399734777459420411359972243","69187395976085701101404452460821305564","107330269270955045944742671467092557026","5057675959711498362234534126275630108","82010185885517143293113145326211704617","242529682537384182506986366557682501806","221944401727185269755334866930184879132","158448676480102414027779369708045930325","156920046477798560374823902624051824252","273027613730394784394737295736963397348","104424195872113355434228402279043544550","156233372356047225633113731636314392279","37427652773195948809491513767979418093","93166199624803918610661430068480261783","171498246101345202195297849406128970206","59795174511389018878761370653469910317","300043298138394808906312351494962799994","248496070369677747540641344587024256709","168516352214166090808396299173109141010","294448047507203347484002755347583574683","280256673906256791922308082785999670777","72694666756546133538567949547702548006"],"threshold":0.9},"id":"ASB-A-396667508-09e9399d","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","target":{"function":"areNotificationsEnabledForPackage","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"function_hash":"50137030720129843182424868869123684399","length":345},"id":"ASB-A-396667508-19fd929d","signature_type":"Function"},{"digest":{"length":480,"function_hash":"231246527256660435838079530375010976262"},"id":"ASB-A-396667508-424b8dfd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"getConversationNotificationChannel"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"resolveNotificationUid"},"deprecated":false,"digest":{"function_hash":"207777736296645912941392049263076360237","length":595},"id":"ASB-A-396667508-4e9b8e68","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java","function":"setup"},"deprecated":false,"digest":{"function_hash":"208068871326447281625678211215124308479","length":1420},"id":"ASB-A-396667508-6e09ba0a","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"checkCallerIsSameApp"},"deprecated":false,"digest":{"length":295,"function_hash":"305445064151357916036679857594399755156"},"id":"ASB-A-396667508-8030a6db","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"getEffectsSuppressor"},"deprecated":false,"digest":{"length":320,"function_hash":"34004467386491868909730786709998970328"},"id":"ASB-A-396667508-db64af6e","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["167501126716018587119275499810791912118","318486943131436126345940480897073881866","143651495922578221084417533520456015137","212789153438999280831028487049194161453","128300056028351732686437431211261181429","330860463999469096656304940898754894442","127257735946869828535420129665154153304","202405628641787956841393280434915673904","273644883567035735326125364280467292564","39610213993419028309327006183383145251","17413738809138397389695830717253062469","180606999226419907722329401448844541964","84933873814762606350458618195785045928","13797188950598143719055117428339577816","326241967822020216091373510351404593739","40041870310826370440010009241901796207","72243195534743323844656786369263517528","255286961527945673535438177890782077057"],"threshold":0.9},"id":"ASB-A-396667508-e1774c06","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"validateAutomaticZenRule"},"deprecated":false,"digest":{"function_hash":"194054172599855610475842191744319332234","length":2181},"id":"ASB-A-396667508-f5fc6cd4","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f5605ae25b15e1f8295e86c431d304e333ce56a4","https://android.googlesource.com/platform/frameworks/base/+/8a638b787a7d2f4aaf3cce21333fa7a42514dfce"],"severity":"High","spl":"2026-06-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-396667508.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-06-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"],"severity":"High","spl":"2026-06-01","types":["DoS"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295","target":{"function":"setup","file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"deprecated":false,"digest":{"function_hash":"53921670342947996092453171383702712902","length":1323},"id":"ASB-A-396667508-13f7633b"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["311776075868199209908180593235021278247","173554188953509075021848555997114625841","30994244569721521029653103736234205919","16544848603399734777459420411359972243","69187395976085701101404452460821305564","107330269270955045944742671467092557026","5057675959711498362234534126275630108","82010185885517143293113145326211704617","242529682537384182506986366557682501806","221944401727185269755334866930184879132","158448676480102414027779369708045930325","156920046477798560374823902624051824252","273027613730394784394737295736963397348","104424195872113355434228402279043544550","156233372356047225633113731636314392279","37427652773195948809491513767979418093","93166199624803918610661430068480261783","171498246101345202195297849406128970206","59795174511389018878761370653469910317","300043298138394808906312351494962799994","248496070369677747540641344587024256709","168516352214166090808396299173109141010","294448047507203347484002755347583574683","280256673906256791922308082785999670777","72694666756546133538567949547702548006"],"threshold":0.9},"id":"ASB-A-396667508-2ec6e55c","signature_type":"Line","signature_version":"v1"},{"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"getEffectsSuppressor"},"deprecated":false,"digest":{"function_hash":"34004467386491868909730786709998970328","length":320},"id":"ASB-A-396667508-41730810","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"},{"deprecated":false,"digest":{"function_hash":"207777736296645912941392049263076360237","length":595},"id":"ASB-A-396667508-9332bda0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295","target":{"function":"resolveNotificationUid","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"}},{"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"checkCallerIsSameApp"},"deprecated":false,"digest":{"length":295,"function_hash":"305445064151357916036679857594399755156"},"id":"ASB-A-396667508-b541f173","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"},{"id":"ASB-A-396667508-c09abf9f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295","target":{"function":"areNotificationsEnabledForPackage","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"length":353,"function_hash":"37690238828963878000712913465981266033"}},{"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"validateAutomaticZenRule"},"deprecated":false,"digest":{"function_hash":"21493660492147640206822512447945319315","length":1572},"id":"ASB-A-396667508-d3f7806f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295"},{"deprecated":false,"digest":{"length":480,"function_hash":"231246527256660435838079530375010976262"},"id":"ASB-A-396667508-d61aa2a6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"getConversationNotificationChannel"}},{"id":"ASB-A-396667508-fa51bb87","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3d72900800a1bf9667336e40f3f6bdf24f09f295","target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"deprecated":false,"digest":{"line_hashes":["167501126716018587119275499810791912118","318486943131436126345940480897073881866","143651495922578221084417533520456015137","212789153438999280831028487049194161453","128300056028351732686437431211261181429","330860463999469096656304940898754894442","127257735946869828535420129665154153304","202405628641787956841393280434915673904","273644883567035735326125364280467292564","39610213993419028309327006183383145251","17413738809138397389695830717253062469","180606999226419907722329401448844541964","84933873814762606350458618195785045928","13797188950598143719055117428339577816","326241967822020216091373510351404593739","34501281023628935063712763780394219378","323289490898469783465079980922881859150","61151563059221844998895245381018526678"],"threshold":0.9}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-396667508.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-06-01"}]}],"versions":["16"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"getEffectsSuppressor"},"deprecated":false,"digest":{"length":320,"function_hash":"34004467386491868909730786709998970328"},"id":"ASB-A-396667508-24ce6e6a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4"},{"target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java","function":"setup"},"deprecated":false,"digest":{"length":1420,"function_hash":"208068871326447281625678211215124308479"},"id":"ASB-A-396667508-30b926fb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4"},{"digest":{"line_hashes":["311776075868199209908180593235021278247","173554188953509075021848555997114625841","30994244569721521029653103736234205919","16544848603399734777459420411359972243","69187395976085701101404452460821305564","107330269270955045944742671467092557026","5057675959711498362234534126275630108","82010185885517143293113145326211704617","242529682537384182506986366557682501806","221944401727185269755334866930184879132","158448676480102414027779369708045930325","156920046477798560374823902624051824252","273027613730394784394737295736963397348","104424195872113355434228402279043544550","156233372356047225633113731636314392279","37427652773195948809491513767979418093","93166199624803918610661430068480261783","171498246101345202195297849406128970206","59795174511389018878761370653469910317","300043298138394808906312351494962799994","248496070369677747540641344587024256709","168516352214166090808396299173109141010","294448047507203347484002755347583574683","280256673906256791922308082785999670777","72694666756546133538567949547702548006"],"threshold":0.9},"id":"ASB-A-396667508-3d880384","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"id":"ASB-A-396667508-4a9e7b75","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","target":{"function":"resolveNotificationUid","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"function_hash":"207777736296645912941392049263076360237","length":595}},{"target":{"function":"areNotificationsEnabledForPackage","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"length":345,"function_hash":"50137030720129843182424868869123684399"},"id":"ASB-A-396667508-74b23183","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4"},{"id":"ASB-A-396667508-83fd7c6e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","target":{"function":"validateAutomaticZenRule","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"length":1291,"function_hash":"59191339780957130539963275365137952241"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["167501126716018587119275499810791912118","318486943131436126345940480897073881866","143651495922578221084417533520456015137","212789153438999280831028487049194161453","128300056028351732686437431211261181429","330860463999469096656304940898754894442","127257735946869828535420129665154153304","202405628641787956841393280434915673904","273644883567035735326125364280467292564","39610213993419028309327006183383145251","17413738809138397389695830717253062469","180606999226419907722329401448844541964","84933873814762606350458618195785045928","13797188950598143719055117428339577816","326241967822020216091373510351404593739","40041870310826370440010009241901796207","72243195534743323844656786369263517528","255286961527945673535438177890782077057"]},"id":"ASB-A-396667508-c37c533e","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"checkCallerIsSameApp"},"deprecated":false,"digest":{"function_hash":"305445064151357916036679857594399755156","length":295},"id":"ASB-A-396667508-e5c10250","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"getConversationNotificationChannel"},"deprecated":false,"digest":{"length":480,"function_hash":"231246527256660435838079530375010976262"},"id":"ASB-A-396667508-eb69edfc","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9931811bc94d5db0d6c17b3e2d18cca2959506a4"],"severity":"High","spl":"2026-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-396667508.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-06-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705"],"severity":"High","spl":"2026-06-01","types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false,"digest":{"line_hashes":["311776075868199209908180593235021278247","173554188953509075021848555997114625841","30994244569721521029653103736234205919","16544848603399734777459420411359972243","69187395976085701101404452460821305564","230858874161068579965200542526066464547","248073214681357485477302217045111523716","184646465235922378966532768242104740060","320705647374390279630953455366129305776","259719614258695601559025597029121012157","105537389429175060221598269746763207726","110570907393677328033717206344777840785","36817893150851478897978189590751813895","168516352214166090808396299173109141010","294448047507203347484002755347583574683","280256673906256791922308082785999670777","72694666756546133538567949547702548006"],"threshold":0.9},"id":"ASB-A-396667508-120238b0","signature_type":"Line","signature_version":"v1"},{"digest":{"length":295,"function_hash":"305445064151357916036679857594399755156"},"id":"ASB-A-396667508-49372ecf","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705","target":{"function":"checkCallerIsSameApp","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"target":{"function":"setup","file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"},"deprecated":false,"digest":{"function_hash":"53921670342947996092453171383702712902","length":1323},"id":"ASB-A-396667508-bbeaba4e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705"},{"digest":{"length":480,"function_hash":"231246527256660435838079530375010976262"},"id":"ASB-A-396667508-db496b4d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705","target":{"function":"getConversationNotificationChannel","file":"services/core/java/com/android/server/notification/NotificationManagerService.java"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["167501126716018587119275499810791912118","318486943131436126345940480897073881866","143651495922578221084417533520456015137","31009025591479672692194662111776868673","252160476245399169130789295909641112834","155877341641905023578416530582262621472","109056397751080462341968595360174433210","252237268444944532130811304789253907201","139197936973216126785468848020887968055","120046709075674548549695691740964987837","155821714203419777662362063457669415519","311602187478921553778809534058826673155","67774471323848770003077394129421048957","266289982402771435401118611319514875314","80722307318898221249257415238934053817","289359513436208212386337049230003429018","339718667904611365457682021892769363550","330338419510567171601645924086002668144","68947804206987492735004414115348543235","34501281023628935063712763780394219378","323289490898469783465079980922881859150","61151563059221844998895245381018526678"],"threshold":0.9},"id":"ASB-A-396667508-eedb3b3a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705","target":{"file":"services/tests/uiservicestests/src/com/android/server/UiServiceTestCase.java"}},{"deprecated":false,"digest":{"length":353,"function_hash":"37690238828963878000712913465981266033"},"id":"ASB-A-396667508-fbd0836c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/44ee96106f25ef7e7393493de65ac53e1b6c6705","target":{"file":"services/core/java/com/android/server/notification/NotificationManagerService.java","function":"areNotificationsEnabledForPackage"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-396667508.json"}}],"schema_version":"1.9.0"}