{"id":"ASB-A-445917646","details":"In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-445917646","CVE-2026-0015"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2026-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/a4523e227733ae20eafe4ec3e85474a5b7ebf7c6"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2-next:0"},{"fixed":"16-qpr2-next:2026-03-01"}]}],"versions":["16-qpr2-next"],"ecosystem_specific":{"spl":"2026-03-01","types":["DoS"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/110db0acb84cbd21f9da9391ab242d141ebf390c","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"startOperationUnchecked"},"deprecated":false,"digest":{"length":3885,"function_hash":"307215331963144164209587660733774216140"},"id":"ASB-A-445917646-08c6f7cd"},{"digest":{"function_hash":"59342249404415910417004678014080565660","length":148},"id":"ASB-A-445917646-0b1424b5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/110db0acb84cbd21f9da9391ab242d141ebf390c","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"verifyAndGetBypass"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/110db0acb84cbd21f9da9391ab242d141ebf390c","target":{"function":"verifyAndGetBypass","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"function_hash":"248498907572588649874334056322847821150","length":180},"id":"ASB-A-445917646-16416d38","signature_type":"Function"},{"digest":{"function_hash":"69686654600721415585337544722767397906","length":1222},"id":"ASB-A-445917646-18fd0fc4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/110db0acb84cbd21f9da9391ab242d141ebf390c","target":{"function":"finishOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false},{"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"startOperationDryRun"},"deprecated":false,"digest":{"function_hash":"203425064724501862015481236945932007530","length":2694},"id":"ASB-A-445917646-3d9dd402","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/110db0acb84cbd21f9da9391ab242d141ebf390c"},{"deprecated":false,"digest":{"line_hashes":["330530672164379025754662412539104920137","259550456973159802472716428813876181396","1818116246043691820067614617052712139","119024878017943317231052657070942098962","103042495513522325793670869708008691994","270155441901779107821828624089571160037","142053997040157924109287161808248140680"],"threshold":0.9},"id":"ASB-A-445917646-4ee04a3d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/110db0acb84cbd21f9da9391ab242d141ebf390c","target":{"file":"services/core/java/com/android/server/appop/AttributedOp.java"}},{"id":"ASB-A-445917646-5f0ab867","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c5ddffd4869d8e82fba0b0237fa1b50db1b7b9d2","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"getAttributedOpWithClientId"},"deprecated":false,"digest":{"function_hash":"154449751110998932676943463000353373986","length":570}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4a63d960496052db7c997bbfbdba11075d06b572","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"line_hashes":["327829384594738988864123182543555066372","243781062236540630707817481551116275887","137819077720437360171542756705516151684","307070524664529208563702523758237163592","11697143313366088979629753542035151377"],"threshold":0.9},"id":"ASB-A-445917646-67977d4a","signature_type":"Line"},{"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"noteOperationUnchecked"},"deprecated":false,"digest":{"length":4936,"function_hash":"180789776483584688744416148323340636057"},"id":"ASB-A-445917646-67f5f567","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/110db0acb84cbd21f9da9391ab242d141ebf390c"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/c5ddffd4869d8e82fba0b0237fa1b50db1b7b9d2","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"line_hashes":["65186845225930482569022054208205253664","31159490920251270152858106091079657148","91549800619542179270233275634632935287","182392421475285000935709411155740621132","105598818425523387169251964947809646112","70002587736042323340988347926777330978"],"threshold":0.9},"id":"ASB-A-445917646-75ee2c3a","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["38932301467651329068613722681980572843","134701634633789678903834506989617154955","114084301794766497204336118306978163937","160917515602284478103710543282763338390","247457736868486531437768457412993885189","73192747114274041901146686726952053001","304287011264506627605613401242159168489","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","235063471503099809410721299402746267769","84875072090047176696217956041055994191","184790118392178940980103297180484312885","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","215985148140525446193811267263968293489","93355832091877390764593675514732451997","322970955676575918675669955121062610931","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","259243269073409252942904228957159482328","327829384594738988864123182543555066372","4976857701099275677009746438827221757","113154052848368611807527229345694326181","128878357327372257440072754317264272616","203677781029255715011404187276833880210","154842442106099763461686812135286876995","131872473201618096534153324601272889242","313743527419990799802003755569609658242","195000981509624365631921794171003847901","249815344682674003421835390300945669004","36078233247286258810154840161367016795","225584940048350696823431376574371386426","10538602594925587663649905727884713054","229196527049439616830068130784222363818","178762374132587614081366928418723926979","93795618435814620354158853000768095075","265002765630291794473086947427180496081","198842032865901196809501011662915961968","262007404865727824291549548294733083231","137411204694566444425371716007627249119","269853504629943256520379030609490753606","138066395188947381479795022910460570217","130539499751655048584563918917388722408","71480648069972178054453391558219349050","137785850233270863130393099739849576986","235182397365931801314185464639921991351","273971655816677621686469331402588872381","289648062099665974288366717930645721333","3808237493634513955182316152684227487","12288222842716679750129897038826259695","220506950528587636063447633923566338446","322308704003611049978190290560198441262","56859977337947850708206769239308356448","152441902372932094114951616219871777064","180145154797517822380796130168640958508","286404215708465550311948415361264814525","305296587339805294667101533406149927069","250003857288062018250024284927579407938","101495602276434070650837399878176188467","217525580373318332542580908768624589425","149412417246069490923958597107392195879","110567506443035856932871718523581729521","290217515788970648539012721904504010609","8217208863075763971982190587858671467","238467600230233915820240719627562965485","137885209828954897441434275967027828044","156654253082784395742393803641199394089","164223194116210800247257127155446051524","223214544844029181869987936655171835509","171687025137636845488954886914987342853","230742910188772359435691789568494813135","305769795152085939923055382071987557898","271314910189782282787508592277244808546","121866962071557168981841286626161360668","154988388988370773480755792590285867286","292619197316642069409604309678990649392","260820005342307176923610373436071225670","13585002881014444557561477178990069597","68743900385061192966500952868930468728"],"threshold":0.9},"id":"ASB-A-445917646-bd5fcd82","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/110db0acb84cbd21f9da9391ab242d141ebf390c","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"}},{"digest":{"length":261,"function_hash":"270661130086840515758877678412014809831"},"id":"ASB-A-445917646-d56c352f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/110db0acb84cbd21f9da9391ab242d141ebf390c","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"isPackageNullOrSystem"},"deprecated":false},{"deprecated":false,"digest":{"length":2758,"function_hash":"259361632338887257785501956161195375767"},"id":"ASB-A-445917646-e67e21dd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4a63d960496052db7c997bbfbdba11075d06b572","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"startOperationDryRun"}},{"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"verifyAndGetBypass"},"deprecated":false,"digest":{"function_hash":"167737434202599206640998684997956027241","length":2987},"id":"ASB-A-445917646-f3416a98","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/110db0acb84cbd21f9da9391ab242d141ebf390c"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/110db0acb84cbd21f9da9391ab242d141ebf390c","https://android.googlesource.com/platform/frameworks/base/+/c5ddffd4869d8e82fba0b0237fa1b50db1b7b9d2","https://android.googlesource.com/platform/frameworks/base/+/4a63d960496052db7c997bbfbdba11075d06b572"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-445917646.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-03-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8"],"severity":"High","spl":"2026-03-01","types":["DoS"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"finishOperationUnchecked"},"deprecated":false,"digest":{"function_hash":"261956256546902571939878540688760092551","length":1214},"id":"ASB-A-445917646-04e63616","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"verifyAndGetBypass"},"deprecated":false,"digest":{"function_hash":"167737434202599206640998684997956027241","length":2987},"id":"ASB-A-445917646-1fb00815","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"startOperationDryRun"},"deprecated":false,"digest":{"function_hash":"192675230999207507429424496559363697706","length":2682},"id":"ASB-A-445917646-4c138711","signature_type":"Function","signature_version":"v1"},{"match_only_versions":["15"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"checkPackage"},"deprecated":false,"digest":{"function_hash":"285589833051795755190907150439480163636","length":438},"id":"ASB-A-445917646-544aac25"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"isPackageNullOrSystem"},"deprecated":false,"digest":{"length":261,"function_hash":"270661130086840515758877678412014809831"},"id":"ASB-A-445917646-815d0021"},{"digest":{"line_hashes":["38932301467651329068613722681980572843","134701634633789678903834506989617154955","114084301794766497204336118306978163937","160917515602284478103710543282763338390","262543680378711059208786854682897740408","48225628518041927694979370322798614768","112035691594427289200706372906132380163","39070610946878585095496759318499138272","213424180653001146968096871741214201663","210280474453522096457143353251971378425","146646613585613077074467613499605930209","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","235063471503099809410721299402746267769","84875072090047176696217956041055994191","184790118392178940980103297180484312885","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","215985148140525446193811267263968293489","93355832091877390764593675514732451997","322970955676575918675669955121062610931","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","327829384594738988864123182543555066372","4976857701099275677009746438827221757","113154052848368611807527229345694326181","128878357327372257440072754317264272616","154842442106099763461686812135286876995","131872473201618096534153324601272889242","313743527419990799802003755569609658242","195000981509624365631921794171003847901","249815344682674003421835390300945669004","36078233247286258810154840161367016795","225584940048350696823431376574371386426","10538602594925587663649905727884713054","229196527049439616830068130784222363818","178762374132587614081366928418723926979","93795618435814620354158853000768095075","265002765630291794473086947427180496081","190479140942078926811086609763973368577","89759652662948439719114599216421334148","239314312832751228520738408739198429682","182471607262980660833212845652823823156","130539499751655048584563918917388722408","71480648069972178054453391558219349050","137785850233270863130393099739849576986","235182397365931801314185464639921991351","273971655816677621686469331402588872381","289648062099665974288366717930645721333","3808237493634513955182316152684227487","12288222842716679750129897038826259695","220506950528587636063447633923566338446","322308704003611049978190290560198441262","56859977337947850708206769239308356448","152441902372932094114951616219871777064","180145154797517822380796130168640958508","286404215708465550311948415361264814525","305296587339805294667101533406149927069","250003857288062018250024284927579407938","101495602276434070650837399878176188467","217525580373318332542580908768624589425","149412417246069490923958597107392195879","110567506443035856932871718523581729521","290217515788970648539012721904504010609","8217208863075763971982190587858671467","238467600230233915820240719627562965485","137885209828954897441434275967027828044","156654253082784395742393803641199394089","164223194116210800247257127155446051524","223214544844029181869987936655171835509","171687025137636845488954886914987342853","230742910188772359435691789568494813135","305769795152085939923055382071987557898","271314910189782282787508592277244808546","121866962071557168981841286626161360668","154988388988370773480755792590285867286","292619197316642069409604309678990649392","260820005342307176923610373436071225670","13585002881014444557561477178990069597","68743900385061192966500952868930468728"],"threshold":0.9},"id":"ASB-A-445917646-8fae2301","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false},{"digest":{"function_hash":"59342249404415910417004678014080565660","length":148},"id":"ASB-A-445917646-8fd3d580","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"verifyAndGetBypass"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8","target":{"function":"startOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"function_hash":"335984347604794034023307145272054053451","length":3843},"id":"ASB-A-445917646-b666cf13"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8","target":{"function":"verifyAndGetBypass","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"function_hash":"248498907572588649874334056322847821150","length":180},"id":"ASB-A-445917646-d1785a03"},{"deprecated":false,"digest":{"line_hashes":["330530672164379025754662412539104920137","259550456973159802472716428813876181396","1818116246043691820067614617052712139","119024878017943317231052657070942098962","103042495513522325793670869708008691994","270155441901779107821828624089571160037","142053997040157924109287161808248140680"],"threshold":0.9},"id":"ASB-A-445917646-d37f1a2b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8","target":{"file":"services/core/java/com/android/server/appop/AttributedOp.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fe871e3cd3fb956814f97acecfaf3b84fd0df7b8","target":{"function":"noteOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"function_hash":"277229222536427424814758851049522555655","length":4854},"id":"ASB-A-445917646-d9faf045"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-445917646.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-03-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3"],"severity":"High","spl":"2026-03-01","types":["DoS"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"finishOperationUnchecked"},"deprecated":false,"digest":{"length":1222,"function_hash":"69686654600721415585337544722767397906"},"id":"ASB-A-445917646-20aa33b2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3"},{"id":"ASB-A-445917646-3ec51633","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"checkPackage"},"deprecated":false,"digest":{"function_hash":"285589833051795755190907150439480163636","length":438}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"startOperationUnchecked"},"deprecated":false,"digest":{"function_hash":"228521426055574656232522536851622887963","length":3877},"id":"ASB-A-445917646-43fe9775","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3","target":{"function":"startOperationDryRun","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"function_hash":"203425064724501862015481236945932007530","length":2694},"id":"ASB-A-445917646-4513c023","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"59342249404415910417004678014080565660","length":148},"id":"ASB-A-445917646-50754179","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3","target":{"function":"verifyAndGetBypass","file":"services/core/java/com/android/server/appop/AppOpsService.java"}},{"id":"ASB-A-445917646-8b0bcde0","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["38932301467651329068613722681980572843","134701634633789678903834506989617154955","114084301794766497204336118306978163937","160917515602284478103710543282763338390","262543680378711059208786854682897740408","48225628518041927694979370322798614768","112035691594427289200706372906132380163","39070610946878585095496759318499138272","247457736868486531437768457412993885189","73192747114274041901146686726952053001","304287011264506627605613401242159168489","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","235063471503099809410721299402746267769","84875072090047176696217956041055994191","184790118392178940980103297180484312885","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","215985148140525446193811267263968293489","93355832091877390764593675514732451997","322970955676575918675669955121062610931","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","327829384594738988864123182543555066372","4976857701099275677009746438827221757","113154052848368611807527229345694326181","128878357327372257440072754317264272616","154842442106099763461686812135286876995","131872473201618096534153324601272889242","313743527419990799802003755569609658242","195000981509624365631921794171003847901","249815344682674003421835390300945669004","36078233247286258810154840161367016795","225584940048350696823431376574371386426","10538602594925587663649905727884713054","229196527049439616830068130784222363818","178762374132587614081366928418723926979","93795618435814620354158853000768095075","265002765630291794473086947427180496081","198842032865901196809501011662915961968","262007404865727824291549548294733083231","137411204694566444425371716007627249119","269853504629943256520379030609490753606","138066395188947381479795022910460570217","130539499751655048584563918917388722408","71480648069972178054453391558219349050","137785850233270863130393099739849576986","235182397365931801314185464639921991351","273971655816677621686469331402588872381","289648062099665974288366717930645721333","3808237493634513955182316152684227487","12288222842716679750129897038826259695","220506950528587636063447633923566338446","322308704003611049978190290560198441262","56859977337947850708206769239308356448","152441902372932094114951616219871777064","180145154797517822380796130168640958508","286404215708465550311948415361264814525","305296587339805294667101533406149927069","250003857288062018250024284927579407938","101495602276434070650837399878176188467","217525580373318332542580908768624589425","149412417246069490923958597107392195879","110567506443035856932871718523581729521","290217515788970648539012721904504010609","8217208863075763971982190587858671467","238467600230233915820240719627562965485","137885209828954897441434275967027828044","156654253082784395742393803641199394089","164223194116210800247257127155446051524","223214544844029181869987936655171835509","171687025137636845488954886914987342853","230742910188772359435691789568494813135","305769795152085939923055382071987557898","271314910189782282787508592277244808546","121866962071557168981841286626161360668","154988388988370773480755792590285867286","292619197316642069409604309678990649392","260820005342307176923610373436071225670","13585002881014444557561477178990069597","68743900385061192966500952868930468728"]}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"isPackageNullOrSystem"},"deprecated":false,"digest":{"length":261,"function_hash":"270661130086840515758877678412014809831"},"id":"ASB-A-445917646-9e5c9411"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"verifyAndGetBypass"},"deprecated":false,"digest":{"length":180,"function_hash":"248498907572588649874334056322847821150"},"id":"ASB-A-445917646-aa6a163b"},{"deprecated":false,"digest":{"function_hash":"167737434202599206640998684997956027241","length":2987},"id":"ASB-A-445917646-c5433d0a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3","target":{"function":"verifyAndGetBypass","file":"services/core/java/com/android/server/appop/AppOpsService.java"}},{"deprecated":false,"digest":{"function_hash":"260226507417439878648573401127293459024","length":4912},"id":"ASB-A-445917646-cb1232ce","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3","target":{"function":"noteOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94d32dce4639ba16b321667719678d2a6b42d9c3","target":{"file":"services/core/java/com/android/server/appop/AttributedOp.java"},"deprecated":false,"digest":{"line_hashes":["330530672164379025754662412539104920137","259550456973159802472716428813876181396","1818116246043691820067614617052712139","119024878017943317231052657070942098962","103042495513522325793670869708008691994","270155441901779107821828624089571160037","142053997040157924109287161808248140680"],"threshold":0.9},"id":"ASB-A-445917646-efa59c61","signature_type":"Line"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-445917646.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-03-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"severity":"High","spl":"2026-03-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"length":316,"function_hash":"239209656882523793162224373127356501592"},"id":"ASB-A-445917646-0140fead","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564","target":{"function":"isPackageNullOrSystem","file":"services/core/java/com/android/server/appop/AppOpsService.java"}},{"digest":{"function_hash":"203425064724501862015481236945932007530","length":2694},"id":"ASB-A-445917646-53ffc150","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"startOperationDryRun"},"deprecated":false},{"id":"ASB-A-445917646-5f29fecd","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564","target":{"file":"services/core/java/com/android/server/appop/AttributedOp.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["330530672164379025754662412539104920137","259550456973159802472716428813876181396","1818116246043691820067614617052712139","119024878017943317231052657070942098962","103042495513522325793670869708008691994","270155441901779107821828624089571160037","142053997040157924109287161808248140680"]}},{"match_only_versions":["16-qpr2"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"checkPackage"},"deprecated":false,"digest":{"function_hash":"285589833051795755190907150439480163636","length":438},"id":"ASB-A-445917646-6c2cc359"},{"digest":{"function_hash":"248498907572588649874334056322847821150","length":180},"id":"ASB-A-445917646-a5450f8f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564","target":{"function":"verifyAndGetBypass","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"verifyAndGetBypass"},"deprecated":false,"digest":{"length":2987,"function_hash":"167737434202599206640998684997956027241"},"id":"ASB-A-445917646-a6222083","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["38932301467651329068613722681980572843","134701634633789678903834506989617154955","114084301794766497204336118306978163937","160917515602284478103710543282763338390","262543680378711059208786854682897740408","48225628518041927694979370322798614768","112035691594427289200706372906132380163","39070610946878585095496759318499138272","247457736868486531437768457412993885189","73192747114274041901146686726952053001","304287011264506627605613401242159168489","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","235063471503099809410721299402746267769","84875072090047176696217956041055994191","184790118392178940980103297180484312885","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","215985148140525446193811267263968293489","93355832091877390764593675514732451997","322970955676575918675669955121062610931","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","327829384594738988864123182543555066372","4976857701099275677009746438827221757","113154052848368611807527229345694326181","128878357327372257440072754317264272616","154842442106099763461686812135286876995","131872473201618096534153324601272889242","313743527419990799802003755569609658242","195000981509624365631921794171003847901","249815344682674003421835390300945669004","36078233247286258810154840161367016795","225584940048350696823431376574371386426","10538602594925587663649905727884713054","229196527049439616830068130784222363818","178762374132587614081366928418723926979","93795618435814620354158853000768095075","265002765630291794473086947427180496081","198842032865901196809501011662915961968","262007404865727824291549548294733083231","137411204694566444425371716007627249119","269853504629943256520379030609490753606","138066395188947381479795022910460570217","130539499751655048584563918917388722408","71480648069972178054453391558219349050","137785850233270863130393099739849576986","235182397365931801314185464639921991351","273971655816677621686469331402588872381","289648062099665974288366717930645721333","3808237493634513955182316152684227487","12288222842716679750129897038826259695","220506950528587636063447633923566338446","322308704003611049978190290560198441262","56859977337947850708206769239308356448","152441902372932094114951616219871777064","180145154797517822380796130168640958508","286404215708465550311948415361264814525","305296587339805294667101533406149927069","250003857288062018250024284927579407938","101495602276434070650837399878176188467","217525580373318332542580908768624589425","149412417246069490923958597107392195879","110567506443035856932871718523581729521","290217515788970648539012721904504010609","8217208863075763971982190587858671467","238467600230233915820240719627562965485","137885209828954897441434275967027828044","156654253082784395742393803641199394089","164223194116210800247257127155446051524","223214544844029181869987936655171835509","171687025137636845488954886914987342853","230742910188772359435691789568494813135","305769795152085939923055382071987557898","271314910189782282787508592277244808546","121866962071557168981841286626161360668","154988388988370773480755792590285867286","292619197316642069409604309678990649392","260820005342307176923610373436071225670","13585002881014444557561477178990069597","68743900385061192966500952868930468728"]},"id":"ASB-A-445917646-cc78bf6a","signature_type":"Line","signature_version":"v1"},{"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"startOperationUnchecked"},"deprecated":false,"digest":{"function_hash":"307215331963144164209587660733774216140","length":3885},"id":"ASB-A-445917646-e6a0f2c8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564","target":{"function":"finishOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"length":1222,"function_hash":"69686654600721415585337544722767397906"},"id":"ASB-A-445917646-e8c1edff","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564","target":{"function":"noteOperationUnchecked","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"function_hash":"180789776483584688744416148323340636057","length":4936},"id":"ASB-A-445917646-f706dec0"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"verifyAndGetBypass"},"deprecated":false,"digest":{"function_hash":"59342249404415910417004678014080565660","length":148},"id":"ASB-A-445917646-fd76d6a9","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bda6d9a5ff8bd0c793ade3d3f6b7eafc2695a564"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-445917646.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-03-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bba49dc2dea0107e9754309314395f0c1f740f60","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"verifyAndGetBypass"},"deprecated":false,"digest":{"function_hash":"167737434202599206640998684997956027241","length":2987},"id":"ASB-A-445917646-1137d67c"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/bba49dc2dea0107e9754309314395f0c1f740f60","target":{"function":"isPackageNullOrSystem","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"function_hash":"270661130086840515758877678412014809831","length":261},"id":"ASB-A-445917646-13f8ead1","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bba49dc2dea0107e9754309314395f0c1f740f60","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"verifyAndGetBypass"},"deprecated":false,"digest":{"length":180,"function_hash":"248498907572588649874334056322847821150"},"id":"ASB-A-445917646-251e4f99","signature_type":"Function"},{"id":"ASB-A-445917646-445f8a5d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bba49dc2dea0107e9754309314395f0c1f740f60","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["38932301467651329068613722681980572843","134701634633789678903834506989617154955","114084301794766497204336118306978163937","160917515602284478103710543282763338390","262543680378711059208786854682897740408","48225628518041927694979370322798614768","112035691594427289200706372906132380163","39070610946878585095496759318499138272","237281497391208174935594232886674921341","133197958878665089757453831517724541864","146646613585613077074467613499605930209","29499271266165074148365190474283793239","63982512573565117780430392129400361332","155752917855580528331226266758077048355","283276967689807404156731359804827027057","228726743413128966777848819639210334136","305835914214977582573047738089789696061","188428408291921873817044190722070094322","256478106757666611557382240629719169691","218718546299844494608955099289456984019","281038255632048985417851140235992457426","228062852951716902876877777130704538241","323845817206785728794148075749886112013","113154052848368611807527229345694326181","123619238778301656212356968364695974365","122378465535032851124570391454798929327","302774358647895647776673722384491299421","313743527419990799802003755569609658242","195000981509624365631921794171003847901","249815344682674003421835390300945669004","36078233247286258810154840161367016795","47738188279273856380177765863943025872","10538602594925587663649905727884713054","229196527049439616830068130784222363818","178762374132587614081366928418723926979","93795618435814620354158853000768095075","265002765630291794473086947427180496081","44886074646885795722604345039164817810","147866233745117524668468407974042731944","55503530488048711951421188006849999483","335334773055924698587996816271197000479","142755240643133366352348226964143927718","42146220696441934147615314485290700280","314201437915419521013700041276009932400","71480648069972178054453391558219349050","62636580059062078916205656863980485244","5497758583801356540842386174237441943","273971655816677621686469331402588872381","289648062099665974288366717930645721333","3808237493634513955182316152684227487","12288222842716679750129897038826259695","220506950528587636063447633923566338446","322308704003611049978190290560198441262","56859977337947850708206769239308356448","152441902372932094114951616219871777064","180145154797517822380796130168640958508","286404215708465550311948415361264814525","305296587339805294667101533406149927069","250003857288062018250024284927579407938","101495602276434070650837399878176188467","217525580373318332542580908768624589425","149412417246069490923958597107392195879","110567506443035856932871718523581729521","290217515788970648539012721904504010609","8217208863075763971982190587858671467","238467600230233915820240719627562965485","137885209828954897441434275967027828044","156654253082784395742393803641199394089","164223194116210800247257127155446051524","223214544844029181869987936655171835509","171687025137636845488954886914987342853","230742910188772359435691789568494813135","305769795152085939923055382071987557898","271314910189782282787508592277244808546","121866962071557168981841286626161360668","154988388988370773480755792590285867286","292619197316642069409604309678990649392","260820005342307176923610373436071225670","13585002881014444557561477178990069597","68743900385061192966500952868930468728"]}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bba49dc2dea0107e9754309314395f0c1f740f60","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"checkPackage"},"deprecated":false,"digest":{"length":438,"function_hash":"285589833051795755190907150439480163636"},"id":"ASB-A-445917646-54cac2a8","match_only_versions":["14"],"signature_type":"Function"},{"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"startOperationUnchecked"},"deprecated":false,"digest":{"length":3777,"function_hash":"296309024483825099013133924514956120813"},"id":"ASB-A-445917646-5668e8a1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bba49dc2dea0107e9754309314395f0c1f740f60"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bba49dc2dea0107e9754309314395f0c1f740f60","target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"noteOperationUnchecked"},"deprecated":false,"digest":{"function_hash":"11830784020807163123176344172439221556","length":3614},"id":"ASB-A-445917646-6a7bbc6e","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bba49dc2dea0107e9754309314395f0c1f740f60","target":{"file":"services/core/java/com/android/server/appop/AttributedOp.java"},"deprecated":false,"digest":{"line_hashes":["133430651912437191744040571913722861933","84591454803637392690781796926424527595","187896550482762694895534229473477390338","132806818901694157133041991385155583253","103042495513522325793670869708008691994","270155441901779107821828624089571160037","142053997040157924109287161808248140680"],"threshold":0.9},"id":"ASB-A-445917646-8fe9b7f6"},{"target":{"file":"services/core/java/com/android/server/appop/AppOpsService.java","function":"finishOperationUnchecked"},"deprecated":false,"digest":{"function_hash":"281543717692422033712335127237364024331","length":1268},"id":"ASB-A-445917646-bae7141d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bba49dc2dea0107e9754309314395f0c1f740f60"},{"id":"ASB-A-445917646-dab087b1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bba49dc2dea0107e9754309314395f0c1f740f60","target":{"function":"verifyAndGetBypass","file":"services/core/java/com/android/server/appop/AppOpsService.java"},"deprecated":false,"digest":{"function_hash":"59342249404415910417004678014080565660","length":148}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bba49dc2dea0107e9754309314395f0c1f740f60"],"severity":"High","spl":"2026-03-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-445917646.json"}}],"schema_version":"1.9.0"}