{"id":"ASB-A-414603411","details":"In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.","aliases":["A-414603411","CVE-2025-48554"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-09-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/c0978bc04a25c0a1e5114974719f88232c35b5bb"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-09-01"}]}],"versions":["16-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/529153ed40020c0ce2e115e72b74d145314d9348"],"severity":"High","spl":"2025-09-01","types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/529153ed40020c0ce2e115e72b74d145314d9348","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"line_hashes":["94720196632102637321977981891197885736","83706157311562590761479425433407389016","67399806112306460777844889267405988407","248801093488655933336276240117937593626","233406570654536098027916344674138702956","292703199734933694011225599895194664045","210635390672313168494326983518807160800","95168792896741007851083972695209039867","338084244245178083796041133842011941504","263851676115771085153424044117824394743","301877753837224152697039480889849498901","229561413618284568083732756325996978222","183044106225086971701581246487075553857","295701431372114834721068990686901702173","253286818327875334375550498141043985156","161195342110900765881172206148163507393"],"threshold":0.9},"id":"ASB-A-414603411-450defa1","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-414603411-56f929e5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/529153ed40020c0ce2e115e72b74d145314d9348","target":{"file":"core/java/android/app/admin/DeviceAdminInfo.java"},"deprecated":false,"digest":{"line_hashes":["201548429223907915580926878885395949892","218921826108881853460957516639654166286","157819270337111358343798165169499670916","140359126599851279954842198522539482372"],"threshold":0.9}},{"digest":{"length":2846,"function_hash":"220046602039667000703671989283506737736"},"id":"ASB-A-414603411-7719d881","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/529153ed40020c0ce2e115e72b74d145314d9348","target":{"file":"core/java/android/app/admin/DeviceAdminInfo.java","function":"DeviceAdminInfo"},"deprecated":false},{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"handlePackagesChanged"},"deprecated":false,"digest":{"length":1724,"function_hash":"312256430665556210878467488485222245657"},"id":"ASB-A-414603411-daead801","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/529153ed40020c0ce2e115e72b74d145314d9348"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-414603411.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-09-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"length":2999,"function_hash":"103271012250662253335910569816269411916"},"id":"ASB-A-414603411-ac0c5fa1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ffb37079a13891b5914f5b700b4731ebdbf2e118","target":{"file":"core/java/android/app/admin/DeviceAdminInfo.java","function":"DeviceAdminInfo"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ffb37079a13891b5914f5b700b4731ebdbf2e118","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"line_hashes":["94720196632102637321977981891197885736","83706157311562590761479425433407389016","67399806112306460777844889267405988407","248801093488655933336276240117937593626","233406570654536098027916344674138702956","292703199734933694011225599895194664045","210635390672313168494326983518807160800","214449076880190409150467802290134829588","163594010568475155593915025383033873392","203532118972666429264269111294147540821","323950202650065119552255953946766396730","96637708339816718078232762384658797575","183044106225086971701581246487075553857","295701431372114834721068990686901702173","253286818327875334375550498141043985156","161195342110900765881172206148163507393"],"threshold":0.9},"id":"ASB-A-414603411-d4e804b4"},{"deprecated":false,"digest":{"function_hash":"73863560409622497156114208946278296616","length":1758},"id":"ASB-A-414603411-e28bfdad","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ffb37079a13891b5914f5b700b4731ebdbf2e118","target":{"function":"handlePackagesChanged","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ffb37079a13891b5914f5b700b4731ebdbf2e118","target":{"file":"core/java/android/app/admin/DeviceAdminInfo.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["201548429223907915580926878885395949892","218921826108881853460957516639654166286","157819270337111358343798165169499670916","140359126599851279954842198522539482372"]},"id":"ASB-A-414603411-ff5ab92d"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ffb37079a13891b5914f5b700b4731ebdbf2e118"],"severity":"High","spl":"2025-09-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-414603411.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2025-09-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2025-09-01","types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/a25dd078cf5edbe4ba8c43bbafb63b12645123ce","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"handlePackagesChanged"},"deprecated":false,"digest":{"function_hash":"312256430665556210878467488485222245657","length":1724},"id":"ASB-A-414603411-10022fac","signature_type":"Function","signature_version":"v1"},{"target":{"file":"core/java/android/app/admin/DeviceAdminInfo.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["201548429223907915580926878885395949892","218921826108881853460957516639654166286","157819270337111358343798165169499670916","140359126599851279954842198522539482372"]},"id":"ASB-A-414603411-bba5b24b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a25dd078cf5edbe4ba8c43bbafb63b12645123ce"},{"id":"ASB-A-414603411-c104bf17","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a25dd078cf5edbe4ba8c43bbafb63b12645123ce","target":{"file":"core/java/android/app/admin/DeviceAdminInfo.java","function":"DeviceAdminInfo"},"deprecated":false,"digest":{"function_hash":"220046602039667000703671989283506737736","length":2846}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a25dd078cf5edbe4ba8c43bbafb63b12645123ce","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["94720196632102637321977981891197885736","83706157311562590761479425433407389016","67399806112306460777844889267405988407","248801093488655933336276240117937593626","233406570654536098027916344674138702956","292703199734933694011225599895194664045","210635390672313168494326983518807160800","95168792896741007851083972695209039867","338084244245178083796041133842011941504","263851676115771085153424044117824394743","301877753837224152697039480889849498901","229561413618284568083732756325996978222","183044106225086971701581246487075553857","295701431372114834721068990686901702173","253286818327875334375550498141043985156","161195342110900765881172206148163507393"]},"id":"ASB-A-414603411-e69c287d","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a25dd078cf5edbe4ba8c43bbafb63b12645123ce"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-414603411.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-09-01"}]}],"versions":["13"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e48f8b89791ffb3a2a887634f12cc3a11b737b21"],"severity":"High","spl":"2025-09-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"125249824271335051800440036046524779283","length":2211},"id":"ASB-A-414603411-3f5e202a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e48f8b89791ffb3a2a887634f12cc3a11b737b21","target":{"file":"core/java/android/app/admin/DeviceAdminInfo.java","function":"DeviceAdminInfo"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e48f8b89791ffb3a2a887634f12cc3a11b737b21","target":{"file":"core/java/android/app/admin/DeviceAdminInfo.java"},"deprecated":false,"digest":{"line_hashes":["201548429223907915580926878885395949892","218921826108881853460957516639654166286","157819270337111358343798165169499670916","140359126599851279954842198522539482372"],"threshold":0.9},"id":"ASB-A-414603411-60a86235","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"135062638964800748049529259378932951662","length":1486},"id":"ASB-A-414603411-7851be1a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e48f8b89791ffb3a2a887634f12cc3a11b737b21","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"handlePackagesChanged"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e48f8b89791ffb3a2a887634f12cc3a11b737b21","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"line_hashes":["56219608331352344013042742912109663198","24186754092468586835602673761130402636","147101371453042844537676390715939942391","43081825471696654236243562209314836555","94720196632102637321977981891197885736","83706157311562590761479425433407389016","96195597552895735482482435694876278291","248801093488655933336276240117937593626","233406570654536098027916344674138702956","292703199734933694011225599895194664045","210635390672313168494326983518807160800","214449076880190409150467802290134829588","163594010568475155593915025383033873392","203532118972666429264269111294147540821","44371226829235814565158079541593653804","201465500292415371788794337788374545355","186278175454941404470822557525090535377"],"threshold":0.9},"id":"ASB-A-414603411-a91ad18a"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-414603411.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-09-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"digest":{"length":1819,"function_hash":"318326022891041537964988301366655015893"},"id":"ASB-A-414603411-1baf5045","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2b60a030a21dd8996415d3be186ee24e4c01a240","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"handlePackagesChanged"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2b60a030a21dd8996415d3be186ee24e4c01a240","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["94720196632102637321977981891197885736","83706157311562590761479425433407389016","67399806112306460777844889267405988407","248801093488655933336276240117937593626","233406570654536098027916344674138702956","292703199734933694011225599895194664045","210635390672313168494326983518807160800","214449076880190409150467802290134829588","163594010568475155593915025383033873392","203532118972666429264269111294147540821","323950202650065119552255953946766396730","96637708339816718078232762384658797575","183044106225086971701581246487075553857","295701431372114834721068990686901702173","253286818327875334375550498141043985156","161195342110900765881172206148163507393"]},"id":"ASB-A-414603411-93548fcb","signature_type":"Line"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["201548429223907915580926878885395949892","218921826108881853460957516639654166286","157819270337111358343798165169499670916","140359126599851279954842198522539482372"]},"id":"ASB-A-414603411-d29cc4cc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2b60a030a21dd8996415d3be186ee24e4c01a240","target":{"file":"core/java/android/app/admin/DeviceAdminInfo.java"}},{"id":"ASB-A-414603411-eab430e6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2b60a030a21dd8996415d3be186ee24e4c01a240","target":{"file":"core/java/android/app/admin/DeviceAdminInfo.java","function":"DeviceAdminInfo"},"deprecated":false,"digest":{"function_hash":"136925760047255264460018910348577292327","length":2632}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2b60a030a21dd8996415d3be186ee24e4c01a240"],"severity":"High","spl":"2025-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-414603411.json"}}],"schema_version":"1.9.0"}