{"id":"ASB-A-503434084","details":"In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-503434084","CVE-2026-58955"],"modified":"2026-11-02T16:56:08.995192652Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/778befd095741a74c44bb4918a62a489db21a960"],"severity":"High","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/778befd095741a74c44bb4918a62a489db21a960","target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["99289647571232510481389812104751965914","50051294126976746144821310756638615682","21412844261693208389762148924252246198","193336673682089301328998255716838246639","248967070127580637519481399638066224127","328663608048165839616934861231461969752"]},"id":"ASB-A-503434084-2eeb0a10"},{"target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java","function":"updateNotificationChannel"},"deprecated":false,"digest":{"function_hash":"40576872034152590526321012112743910430","length":1900},"id":"ASB-A-503434084-f99d2f79","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/778befd095741a74c44bb4918a62a489db21a960"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503434084.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fa35047864a3d2fd942dbfc68bc4300dc157bd13","target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java","function":"updateNotificationChannel"},"deprecated":false,"digest":{"length":1913,"function_hash":"98412343933750007730201275554316344453"},"id":"ASB-A-503434084-4df4c2fb"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fa35047864a3d2fd942dbfc68bc4300dc157bd13","target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["99289647571232510481389812104751965914","50051294126976746144821310756638615682","21412844261693208389762148924252246198","193336673682089301328998255716838246639","248967070127580637519481399638066224127","328663608048165839616934861231461969752"]},"id":"ASB-A-503434084-d3a8f761"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fa35047864a3d2fd942dbfc68bc4300dc157bd13"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503434084.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-503434084-05676eb9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5b98f9c946596f2e9727d23842250482e1373cc0","target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java","function":"updateNotificationChannel"},"deprecated":false,"digest":{"function_hash":"187646998218516605980128758778494578736","length":1972}},{"deprecated":false,"digest":{"line_hashes":["99289647571232510481389812104751965914","50051294126976746144821310756638615682","21412844261693208389762148924252246198","193336673682089301328998255716838246639","248967070127580637519481399638066224127","328663608048165839616934861231461969752"],"threshold":0.9},"id":"ASB-A-503434084-158f9f46","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5b98f9c946596f2e9727d23842250482e1373cc0","target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5b98f9c946596f2e9727d23842250482e1373cc0"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503434084.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4fad0e6dbe9e2519e9665ff5d1c5fca958f83e85","target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"},"deprecated":false,"digest":{"line_hashes":["99289647571232510481389812104751965914","50051294126976746144821310756638615682","21412844261693208389762148924252246198","193336673682089301328998255716838246639","248967070127580637519481399638066224127","328663608048165839616934861231461969752"],"threshold":0.9},"id":"ASB-A-503434084-4599eb1f"},{"deprecated":false,"digest":{"function_hash":"170955458052630401049378895542129874137","length":1958},"id":"ASB-A-503434084-533dcaeb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4fad0e6dbe9e2519e9665ff5d1c5fca958f83e85","target":{"function":"updateNotificationChannel","file":"services/core/java/com/android/server/notification/PreferencesHelper.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4fad0e6dbe9e2519e9665ff5d1c5fca958f83e85"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503434084.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d0df98fe6deeb9dca44575a9fd4ec66360a8cd81","target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java","function":"updateNotificationChannel"},"deprecated":false,"digest":{"function_hash":"29972710228600433142493442158860577637","length":2050},"id":"ASB-A-503434084-575c4338","signature_type":"Function"},{"id":"ASB-A-503434084-9146dbca","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d0df98fe6deeb9dca44575a9fd4ec66360a8cd81","target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"},"deprecated":false,"digest":{"line_hashes":["99289647571232510481389812104751965914","50051294126976746144821310756638615682","21412844261693208389762148924252246198","193336673682089301328998255716838246639","248967070127580637519481399638066224127","328663608048165839616934861231461969752"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d0df98fe6deeb9dca44575a9fd4ec66360a8cd81"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503434084.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/db70698d55c4c9230c47334bc3071859b4cfec3d","target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java"},"deprecated":false,"digest":{"line_hashes":["99289647571232510481389812104751965914","50051294126976746144821310756638615682","21412844261693208389762148924252246198","193336673682089301328998255716838246639","248967070127580637519481399638066224127","328663608048165839616934861231461969752"],"threshold":0.9},"id":"ASB-A-503434084-5bb9166d","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/db70698d55c4c9230c47334bc3071859b4cfec3d","target":{"file":"services/core/java/com/android/server/notification/PreferencesHelper.java","function":"updateNotificationChannel"},"deprecated":false,"digest":{"function_hash":"24535744016768166690620379697554231943","length":1661},"id":"ASB-A-503434084-ac5815da","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/db70698d55c4c9230c47334bc3071859b4cfec3d"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503434084.json"}}],"schema_version":"1.9.2"}