{"id":"ASB-A-515039631","details":"In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-515039631","CVE-2026-59021"],"modified":"2026-11-02T17:11:11.207460224Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981","https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f"],"severity":"High","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"id":"ASB-A-515039631-05095ef8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981","target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java","function":"PackageSetPolicyValue"},"deprecated":false,"digest":{"length":142,"function_hash":"34659601494023799482677074164532099248"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"},"deprecated":false,"digest":{"line_hashes":["243368936905742620578513068549026548445","193110667441231283321476965073360736288","218099890861778408405069922671975548474","175126710795153036151242552958750216267","47901839472414805516038092242920985095","177801360853088162253520013067887973566","199489608104889314402184530140110487542","208484254811162875739360157143140204690"],"threshold":0.9},"id":"ASB-A-515039631-0d7177be","signature_type":"Line","signature_version":"v1"},{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"line_hashes":["321763733962275643559118229726044710719","88684299452946300831045243716602147434","284036392316726610070016885761603217582","87793410835511240702531674304976622635","153799828404160278957079870272178625848","294170385808985121110335768937967819179","234298953118864217095220005926070483053","91514579350714577320962977222088152713","127966128950204224917871732393106704714"],"threshold":0.9},"id":"ASB-A-515039631-1183479b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f"},{"deprecated":false,"digest":{"length":318,"function_hash":"153200294435752143022356277837100581238"},"id":"ASB-A-515039631-19a6ed51","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java","function":"readFromXml"}},{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java","function":"readPoliciesInner"},"deprecated":false,"digest":{"function_hash":"267865789664666215397381617537400502970","length":883},"id":"ASB-A-515039631-2df6b0ac","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f"},{"deprecated":false,"digest":{"function_hash":"255107048940014734816711678071447957227","length":527},"id":"ASB-A-515039631-6cb06717","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5a6da90eafbffaa512795292791bf880e95e216f","target":{"function":"readFromFileLocked","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}},{"digest":{"threshold":0.9,"line_hashes":["231633415161139923264656521787716904812","269231175529179720030483611474918175209","102012814968420342914288420277635581331","93200900556949143228344950415444301051","318251155983788843045672270729713195027","209808470815853812058074118283198803459","6901387035422447823454668606629831614","330452917664844419508106711146933288917"]},"id":"ASB-A-515039631-b249f271","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981","target":{"function":"readFromXml","file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"},"deprecated":false,"digest":{"function_hash":"24882925491811920059342573902720348974","length":499},"id":"ASB-A-515039631-be5c4ec4","signature_type":"Function"},{"digest":{"line_hashes":["223879276649102080066000130017185689122","186731316937927884938313802110980124160","336434658143821611637790727334031677083","230506368987111576117929438715439876954"],"threshold":0.9},"id":"ASB-A-515039631-e7f87647","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7f342a57b386d249847c9ec4928ec81f1a759981","target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"digest":{"function_hash":"153200294435752143022356277837100581238","length":318},"id":"ASB-A-515039631-01d6932b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java","function":"readFromXml"},"deprecated":false},{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["187157026194315630431998201763619921383","182832263298963824173254745392698809271","192993963584580652809094444558050481906","38162963340999499380158558052648965674","187157026194315630431998201763619921383","182832263298963824173254745392698809271","192993963584580652809094444558050481906","38162963340999499380158558052648965674"]},"id":"ASB-A-515039631-5cb45019","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"},"deprecated":false,"digest":{"line_hashes":["193110667441231283321476965073360736288","218099890861778408405069922671975548474","89176410662035538831963471120198143429","177453545019551287784859045694315688337","47901839472414805516038092242920985095","177801360853088162253520013067887973566","199489608104889314402184530140110487542","208484254811162875739360157143140204690"],"threshold":0.9},"id":"ASB-A-515039631-8492467c","signature_type":"Line"},{"id":"ASB-A-515039631-8aa21e24","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java","function":"readFromXml"},"deprecated":false,"digest":{"function_hash":"24882925491811920059342573902720348974","length":499}},{"target":{"function":"readLocalPoliciesInner","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"length":937,"function_hash":"144534164702623436067250121223596769952"},"id":"ASB-A-515039631-9894539b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java","function":"readFromXml"},"deprecated":false,"digest":{"function_hash":"324163158959534208134387466465670550070","length":975},"id":"ASB-A-515039631-9f4daa1c","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"},"deprecated":false,"digest":{"line_hashes":["231633415161139923264656521787716904812","269231175529179720030483611474918175209","102012814968420342914288420277635581331","93200900556949143228344950415444301051","120073402124271382827459362158695492376","223074383736618463708398308823048011759","97141836362335028432807683536564536345","233500733453329924917418933405837160610","172931090354481768446090546326237088084","97369051588649790311439416251175818075","145894044510438173439087263382386211606","255133850560853693888436084716032824664","93959598156630338415363714976250666289","319507923336257377973081768716185784660","263692978228504464328665042866764277219","89235682808816783233380707645869389968","336876593598446450658372870250527534403","227406213994769042072163562326322003508","318251155983788843045672270729713195027","209808470815853812058074118283198803459","284518855258791654270968686466994467280","52411291727970283365349022538944650986","332238720723635417512040488880234655190","185172603390338943979633985220324159275","265039840649972595120930317926251363348","116095883250075927567837509947103506028"],"threshold":0.9},"id":"ASB-A-515039631-c808d369","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java","function":"readGlobalPoliciesInner"},"deprecated":false,"digest":{"function_hash":"39109735775204805395828111001558560622","length":760},"id":"ASB-A-515039631-cfd57beb","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["136909110875517073025481044960805550267","126660817896163870841392503732641801492","128832033368376731957470524280104951011","17305247469949934761416720454757604726","257459097651405906017661915543721367607","300800078245935808160638892561650678457","57120702040914146305716132267983174489","101847544470687784754996531978080312430"]},"id":"ASB-A-515039631-d5c6a332","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/685e1a9c38d0e4e3a357a0ced66e8b200be4ce42"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"length":879,"function_hash":"216022129035601212696996747116777203907"},"id":"ASB-A-515039631-25d7a385","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510","target":{"function":"readPoliciesInner","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921","target":{"function":"PackageSetPolicyValue","file":"core/java/android/app/admin/PackageSetPolicyValue.java"},"deprecated":false,"digest":{"function_hash":"34659601494023799482677074164532099248","length":142},"id":"ASB-A-515039631-2d5e0d53"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java","function":"readFromFileLocked"},"deprecated":false,"digest":{"function_hash":"255107048940014734816711678071447957227","length":527},"id":"ASB-A-515039631-3bb36e4c","signature_type":"Function"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["321763733962275643559118229726044710719","88684299452946300831045243716602147434","284036392316726610070016885761603217582","87793410835511240702531674304976622635","153799828404160278957079870272178625848","294170385808985121110335768937967819179","234298953118864217095220005926070483053","91514579350714577320962977222088152713","127966128950204224917871732393106704714"]},"id":"ASB-A-515039631-42ab0e76","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}},{"digest":{"length":318,"function_hash":"153200294435752143022356277837100581238"},"id":"ASB-A-515039631-4ac1e05b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921","target":{"function":"readFromXml","file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921","target":{"function":"readFromXml","file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"},"deprecated":false,"digest":{"length":499,"function_hash":"24882925491811920059342573902720348974"},"id":"ASB-A-515039631-6ec2689f"},{"id":"ASB-A-515039631-83ae8ab3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["231633415161139923264656521787716904812","269231175529179720030483611474918175209","102012814968420342914288420277635581331","93200900556949143228344950415444301051","318251155983788843045672270729713195027","209808470815853812058074118283198803459","284518855258791654270968686466994467280","52411291727970283365349022538944650986"]}},{"digest":{"threshold":0.9,"line_hashes":["243368936905742620578513068549026548445","193110667441231283321476965073360736288","218099890861778408405069922671975548474","89176410662035538831963471120198143429","47901839472414805516038092242920985095","177801360853088162253520013067887973566","199489608104889314402184530140110487542","208484254811162875739360157143140204690"]},"id":"ASB-A-515039631-ba226279","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"},"deprecated":false},{"target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["223879276649102080066000130017185689122","186731316937927884938313802110980124160","336434658143821611637790727334031677083","230506368987111576117929438715439876954"]},"id":"ASB-A-515039631-e3e4fef8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d22e4e1c636d3271cb38fc65cf2d5711f68c9921","https://android.googlesource.com/platform/frameworks/base/+/73d75601af3946f4e2e9caf1774b21a4baa97510"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"vanir_signatures":[{"target":{"function":"readFromFileLocked","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"function_hash":"255107048940014734816711678071447957227","length":527},"id":"ASB-A-515039631-0ee58de9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"},"deprecated":false,"digest":{"line_hashes":["231633415161139923264656521787716904812","269231175529179720030483611474918175209","102012814968420342914288420277635581331","93200900556949143228344950415444301051","318251155983788843045672270729713195027","209808470815853812058074118283198803459","284518855258791654270968686466994467280","52411291727970283365349022538944650986"],"threshold":0.9},"id":"ASB-A-515039631-18afab90","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504","target":{"function":"PackageSetPolicyValue","file":"core/java/android/app/admin/PackageSetPolicyValue.java"},"deprecated":false,"digest":{"length":142,"function_hash":"34659601494023799482677074164532099248"},"id":"ASB-A-515039631-25ca61a1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504","target":{"function":"readFromXml","file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"},"deprecated":false,"digest":{"function_hash":"24882925491811920059342573902720348974","length":499},"id":"ASB-A-515039631-25f6f843","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5","target":{"function":"readPoliciesInner","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"function_hash":"216022129035601212696996747116777203907","length":879},"id":"ASB-A-515039631-5742f2ce"},{"deprecated":false,"digest":{"line_hashes":["223879276649102080066000130017185689122","186731316937927884938313802110980124160","336434658143821611637790727334031677083","230506368987111576117929438715439876954"],"threshold":0.9},"id":"ASB-A-515039631-5a76a2fd","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504","target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["321763733962275643559118229726044710719","88684299452946300831045243716602147434","284036392316726610070016885761603217582","87793410835511240702531674304976622635","153799828404160278957079870272178625848","294170385808985121110335768937967819179","234298953118864217095220005926070483053","91514579350714577320962977222088152713","127966128950204224917871732393106704714"]},"id":"ASB-A-515039631-62bdad56","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504","target":{"function":"readFromXml","file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"},"deprecated":false,"digest":{"function_hash":"153200294435752143022356277837100581238","length":318},"id":"ASB-A-515039631-c6930f08","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["243368936905742620578513068549026548445","193110667441231283321476965073360736288","218099890861778408405069922671975548474","89176410662035538831963471120198143429","47901839472414805516038092242920985095","177801360853088162253520013067887973566","199489608104889314402184530140110487542","208484254811162875739360157143140204690"]},"id":"ASB-A-515039631-e59b9c28"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/32c30b6257f03da8696de5da7197f204dd2bb504","https://android.googlesource.com/platform/frameworks/base/+/e5dd73c2b9b19240dc58e077c62b7eb90184e2c5"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287","https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265"],"severity":"High","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["321763733962275643559118229726044710719","88684299452946300831045243716602147434","284036392316726610070016885761603217582","87793410835511240702531674304976622635","153799828404160278957079870272178625848","294170385808985121110335768937967819179","234298953118864217095220005926070483053","91514579350714577320962977222088152713","127966128950204224917871732393106704714"],"threshold":0.9},"id":"ASB-A-515039631-137cd5fe","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java","function":"readFromXml"},"deprecated":false,"digest":{"function_hash":"24882925491811920059342573902720348974","length":499},"id":"ASB-A-515039631-365e621b","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287","target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java"},"deprecated":false,"digest":{"line_hashes":["223879276649102080066000130017185689122","186731316937927884938313802110980124160","336434658143821611637790727334031677083","230506368987111576117929438715439876954"],"threshold":0.9},"id":"ASB-A-515039631-56d3da4b","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["243368936905742620578513068549026548445","193110667441231283321476965073360736288","218099890861778408405069922671975548474","89176410662035538831963471120198143429","47901839472414805516038092242920985095","177801360853088162253520013067887973566","199489608104889314402184530140110487542","208484254811162875739360157143140204690"]},"id":"ASB-A-515039631-74487d8e","signature_type":"Line","signature_version":"v1"},{"target":{"file":"core/java/android/app/admin/PackageSetPolicyValue.java","function":"PackageSetPolicyValue"},"deprecated":false,"digest":{"function_hash":"34659601494023799482677074164532099248","length":142},"id":"ASB-A-515039631-865a2b2f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287"},{"digest":{"line_hashes":["231633415161139923264656521787716904812","269231175529179720030483611474918175209","102012814968420342914288420277635581331","93200900556949143228344950415444301051","318251155983788843045672270729713195027","209808470815853812058074118283198803459","284518855258791654270968686466994467280","52411291727970283365349022538944650986"],"threshold":0.9},"id":"ASB-A-515039631-87a84133","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/395d631fd017a3f64756981939282910a8994287","target":{"function":"readFromXml","file":"services/devicepolicy/java/com/android/server/devicepolicy/PackageSetPolicySerializer.java"},"deprecated":false,"digest":{"function_hash":"153200294435752143022356277837100581238","length":318},"id":"ASB-A-515039631-a378e6f6"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java","function":"readPoliciesInner"},"deprecated":false,"digest":{"length":883,"function_hash":"267865789664666215397381617537400502970"},"id":"ASB-A-515039631-ddf5c6ea"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5fa82a3b0f22cdb784171035ff8a57d1bf1c1265","target":{"function":"readFromFileLocked","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"function_hash":"255107048940014734816711678071447957227","length":527},"id":"ASB-A-515039631-e3111737","signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["138029899568404744415543479903625660347","277777175013285069235910967327133168094","136909110875517073025481044960805550267","126660817896163870841392503732641801492","190685045329720459263675054739054705658","36137412102058834940740934970615629155","257459097651405906017661915543721367607","300800078245935808160638892561650678457","57120702040914146305716132267983174489","101847544470687784754996531978080312430"]},"id":"ASB-A-515039631-07eb5391","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/StringSetPolicySerializer.java"},"deprecated":false,"digest":{"line_hashes":["243368936905742620578513068549026548445","193110667441231283321476965073360736288","218099890861778408405069922671975548474","67480142918158156442938324893534754062","137526687686617424346282555211034340633","13497933271433295118353315498593234847","204505103211176356857187152675616360188","6044358487019089186287254600581253562"],"threshold":0.9},"id":"ASB-A-515039631-1465977b","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-515039631-2c2ee9a3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"line_hashes":["187157026194315630431998201763619921383","182832263298963824173254745392698809271","192993963584580652809094444558050481906","38162963340999499380158558052648965674","187157026194315630431998201763619921383","182832263298963824173254745392698809271","192993963584580652809094444558050481906","38162963340999499380158558052648965674"],"threshold":0.9}},{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java"},"deprecated":false,"digest":{"line_hashes":["231633415161139923264656521787716904812","269231175529179720030483611474918175209","102012814968420342914288420277635581331","93200900556949143228344950415444301051","318251155983788843045672270729713195027","209808470815853812058074118283198803459","284518855258791654270968686466994467280","52411291727970283365349022538944650986"],"threshold":0.9},"id":"ASB-A-515039631-3acdd7fb","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/EnforcingAdmin.java","function":"readFromXml"},"deprecated":false,"digest":{"function_hash":"324163158959534208134387466465670550070","length":975},"id":"ASB-A-515039631-49cd9da8"},{"id":"ASB-A-515039631-8588e3ba","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a","target":{"function":"readGlobalPoliciesInner","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"function_hash":"39109735775204805395828111001558560622","length":760}},{"id":"ASB-A-515039631-8df320db","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a","target":{"function":"readLocalPoliciesInner","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"function_hash":"144534164702623436067250121223596769952","length":937}},{"digest":{"length":499,"function_hash":"24882925491811920059342573902720348974"},"id":"ASB-A-515039631-b54f8d21","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/LockTaskPolicySerializer.java","function":"readFromXml"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/StringSetPolicySerializer.java","function":"readFromXml"},"deprecated":false,"digest":{"function_hash":"280582108248251692340338970090482519872","length":317},"id":"ASB-A-515039631-c70c1684"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/79346391562161b1ffc3b5a5a1772bb48f9bb98a"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515039631.json"}}],"schema_version":"1.9.2"}