{"id":"ASB-A-443742082","details":"In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-443742082","CVE-2026-0014"],"modified":"2026-04-24T15:37:38.793646Z","published":"2026-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/b51a58ecec96558e1c6b1d47728f45a8795dc7ab"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2-next:0"},{"fixed":"16-qpr2-next:2026-03-01"}]}],"versions":["16-qpr2-next"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"id":"ASB-A-443742082-22aeb062","digest":{"function_hash":"270661130086840515758877678412014809831","length":261},"target":{"function":"isPackageNullOrSystem","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1bc6b146137f76589146dff5cd82363de7ccfb7d","deprecated":false},{"id":"ASB-A-443742082-27739e74","digest":{"threshold":0.9,"line_hashes":["84520241135867156909061113203126500798","70721867393809822898173016409670694781","195335074680049813509517530819123445108","325698393641586403902606717787371623983"]},"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1bc6b146137f76589146dff5cd82363de7ccfb7d","deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1bc6b146137f76589146dff5cd82363de7ccfb7d"],"types":["DoS"],"spl":"2026-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-443742082.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-03-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"id":"ASB-A-443742082-39bf82f5","digest":{"function_hash":"270661130086840515758877678412014809831","length":261},"target":{"function":"isPackageNullOrSystem","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9cacc6180df8eb4451a23f122f457e413a299911","deprecated":false},{"id":"ASB-A-443742082-9b23ba73","digest":{"threshold":0.9,"line_hashes":["84520241135867156909061113203126500798","70721867393809822898173016409670694781","195335074680049813509517530819123445108","325698393641586403902606717787371623983"]},"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9cacc6180df8eb4451a23f122f457e413a299911","deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9cacc6180df8eb4451a23f122f457e413a299911"],"types":["DoS"],"spl":"2026-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-443742082.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-03-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"id":"ASB-A-443742082-47e9ce20","digest":{"function_hash":"270661130086840515758877678412014809831","length":261},"target":{"function":"isPackageNullOrSystem","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/066eff80abf013531320b8280637d1d00dd553a1","deprecated":false},{"id":"ASB-A-443742082-8983f3e8","digest":{"threshold":0.9,"line_hashes":["84520241135867156909061113203126500798","70721867393809822898173016409670694781","195335074680049813509517530819123445108","325698393641586403902606717787371623983"]},"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/066eff80abf013531320b8280637d1d00dd553a1","deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/066eff80abf013531320b8280637d1d00dd553a1"],"types":["DoS"],"spl":"2026-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-443742082.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-03-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"id":"ASB-A-443742082-6b95fa50","digest":{"threshold":0.9,"line_hashes":["84520241135867156909061113203126500798","70721867393809822898173016409670694781","195335074680049813509517530819123445108","325698393641586403902606717787371623983"]},"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/624a725cb350414efe2aff42ea1baeadf3720e15","deprecated":false},{"id":"ASB-A-443742082-75bc807f","digest":{"function_hash":"270661130086840515758877678412014809831","length":261},"target":{"function":"isPackageNullOrSystem","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/624a725cb350414efe2aff42ea1baeadf3720e15","deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/624a725cb350414efe2aff42ea1baeadf3720e15"],"types":["DoS"],"spl":"2026-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-443742082.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-03-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","vanir_signatures":[{"id":"ASB-A-443742082-1ae8c2db","digest":{"function_hash":"270661130086840515758877678412014809831","length":261},"target":{"function":"isPackageNullOrSystem","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b243b0d29bb087067d9efb7f6e433e78cd9c9a89","deprecated":false},{"id":"ASB-A-443742082-9826330a","digest":{"threshold":0.9,"line_hashes":["84520241135867156909061113203126500798","70721867393809822898173016409670694781","195335074680049813509517530819123445108","325698393641586403902606717787371623983"]},"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b243b0d29bb087067d9efb7f6e433e78cd9c9a89","deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b243b0d29bb087067d9efb7f6e433e78cd9c9a89"],"types":["DoS"],"spl":"2026-03-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-443742082.json"}}],"schema_version":"1.7.5"}