{"id":"ASB-A-414389102","details":"In applySimpleFieldMaxSize of DataRowHandler.java, there is a possible way to insert a large contact name due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-414389102","CVE-2026-0085"],"modified":"2026-06-24T15:00:40.818157658Z","published":"2026-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-06-01"}],"affected":[{"package":{"name":"platform/packages/providers/ContactsProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/a191ae10a38ba55f76fe54a84ec153bf74e672c7"],"spl":"2026-06-01","severity":"High","vanir_signatures":[{"deprecated":false,"target":{"function":"applySimpleFieldMaxSize","file":"src/com/android/providers/contacts/DataRowHandler.java"},"digest":{"length":372,"function_hash":"139858400390397635892108979778100010908"},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/a191ae10a38ba55f76fe54a84ec153bf74e672c7","signature_version":"v1","id":"ASB-A-414389102-1342cfee","signature_type":"Function"},{"deprecated":false,"target":{"file":"src/com/android/providers/contacts/DataRowHandler.java"},"digest":{"line_hashes":["217740912455229234456099611545840262735","208189136215709142876282477696876596735","257545721010274112638913579184386032232","87622368114666001643778982487956451067","24997434560523085361128136394026523753","188523932101793786400876489344635821660","325040967150777450900894149068657882296","146052251027700879332656909156143698150"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/a191ae10a38ba55f76fe54a84ec153bf74e672c7","signature_version":"v1","id":"ASB-A-414389102-95372082","signature_type":"Line"}],"types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-414389102.json"}},{"package":{"name":"platform/packages/providers/ContactsProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-06-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/731fa107fa63ffc69f18a8d11be3fd4be20d6b1f"],"spl":"2026-06-01","severity":"High","vanir_signatures":[{"deprecated":false,"target":{"function":"applySimpleFieldMaxSize","file":"src/com/android/providers/contacts/DataRowHandler.java"},"digest":{"length":372,"function_hash":"139858400390397635892108979778100010908"},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/731fa107fa63ffc69f18a8d11be3fd4be20d6b1f","signature_version":"v1","id":"ASB-A-414389102-79bf410d","signature_type":"Function"},{"deprecated":false,"target":{"file":"src/com/android/providers/contacts/DataRowHandler.java"},"digest":{"line_hashes":["217740912455229234456099611545840262735","208189136215709142876282477696876596735","257545721010274112638913579184386032232","87622368114666001643778982487956451067","24997434560523085361128136394026523753","188523932101793786400876489344635821660","325040967150777450900894149068657882296","146052251027700879332656909156143698150"],"threshold":0.9},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/731fa107fa63ffc69f18a8d11be3fd4be20d6b1f","signature_version":"v1","id":"ASB-A-414389102-b71077ea","signature_type":"Line"}],"types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-414389102.json"}},{"package":{"name":"platform/packages/providers/ContactsProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-06-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/e3b00f098b89148aab2eded680ad4eed2a28493a"],"spl":"2026-06-01","severity":"High","vanir_signatures":[{"deprecated":false,"signature_version":"v1","digest":{"line_hashes":["217740912455229234456099611545840262735","208189136215709142876282477696876596735","257545721010274112638913579184386032232","87622368114666001643778982487956451067","24997434560523085361128136394026523753","188523932101793786400876489344635821660","325040967150777450900894149068657882296","146052251027700879332656909156143698150"],"threshold":0.9},"target":{"file":"src/com/android/providers/contacts/DataRowHandler.java"},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/e3b00f098b89148aab2eded680ad4eed2a28493a","id":"ASB-A-414389102-7a3fa3c7","signature_type":"Line"},{"deprecated":false,"signature_version":"v1","digest":{"length":372,"function_hash":"139858400390397635892108979778100010908"},"target":{"function":"applySimpleFieldMaxSize","file":"src/com/android/providers/contacts/DataRowHandler.java"},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/e3b00f098b89148aab2eded680ad4eed2a28493a","id":"ASB-A-414389102-7f900368","signature_type":"Function"}],"types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-414389102.json"}},{"package":{"name":"platform/packages/providers/ContactsProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-06-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/90e517624b135b8ffc00297b7452efe862143d35"],"spl":"2026-06-01","severity":"High","vanir_signatures":[{"deprecated":false,"signature_version":"v1","digest":{"line_hashes":["217740912455229234456099611545840262735","208189136215709142876282477696876596735","257545721010274112638913579184386032232","87622368114666001643778982487956451067","24997434560523085361128136394026523753","188523932101793786400876489344635821660","325040967150777450900894149068657882296","146052251027700879332656909156143698150"],"threshold":0.9},"target":{"file":"src/com/android/providers/contacts/DataRowHandler.java"},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/90e517624b135b8ffc00297b7452efe862143d35","id":"ASB-A-414389102-21389f53","signature_type":"Line"},{"deprecated":false,"target":{"file":"src/com/android/providers/contacts/DataRowHandler.java","function":"applySimpleFieldMaxSize"},"digest":{"length":372,"function_hash":"139858400390397635892108979778100010908"},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/90e517624b135b8ffc00297b7452efe862143d35","signature_version":"v1","id":"ASB-A-414389102-647a6630","signature_type":"Function"}],"types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-414389102.json"}},{"package":{"name":"platform/packages/providers/ContactsProvider","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-06-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/ff5a13570e01655dbd7f633c3eb3f5d535cb8294"],"spl":"2026-06-01","severity":"High","vanir_signatures":[{"deprecated":false,"target":{"file":"src/com/android/providers/contacts/DataRowHandler.java"},"digest":{"line_hashes":["217740912455229234456099611545840262735","208189136215709142876282477696876596735","257545721010274112638913579184386032232","87622368114666001643778982487956451067","24997434560523085361128136394026523753","188523932101793786400876489344635821660","325040967150777450900894149068657882296","146052251027700879332656909156143698150"],"threshold":0.9},"signature_version":"v1","signature_type":"Line","id":"ASB-A-414389102-8f2d8f81","source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/ff5a13570e01655dbd7f633c3eb3f5d535cb8294"},{"deprecated":false,"signature_version":"v1","digest":{"length":372,"function_hash":"139858400390397635892108979778100010908"},"source":"https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/ff5a13570e01655dbd7f633c3eb3f5d535cb8294","target":{"function":"applySimpleFieldMaxSize","file":"src/com/android/providers/contacts/DataRowHandler.java"},"id":"ASB-A-414389102-fa5f6ce4","signature_type":"Function"}],"types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-414389102.json"}}],"schema_version":"1.7.5"}