{"id":"ASB-A-515158597","details":"In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-515158597","CVE-2026-58834"],"modified":"2026-10-05T16:41:13.204955489Z","published":"2026-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-10-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-10-01"}]}],"versions":["17-next"],"ecosystem_specific":{"severity":"High","spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["67512861029338814249349861885314635053","290156515777081318189778133334877633745","127925059051352371839438547349036061467"]},"id":"ASB-A-515158597-44412631","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d"},{"deprecated":false,"digest":{"line_hashes":["71387856242766300111474108755639060906","245722315977399161983952543873526432790","131604536729388262005348928524854859898","303055045182444199920398436940678675023","120435722638721370935691190501569981545","288961117767715855422939441556262966579","22997619993064488372263118631628684631","247303866414399357566020699537269283774"],"threshold":0.9},"id":"ASB-A-515158597-8eb32da8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}},{"deprecated":false,"digest":{"function_hash":"101408601063527151196425862634223347783","length":698},"id":"ASB-A-515158597-dbd4b16e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java","function":"reapplyAllPoliciesOnBootLocked"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d","target":{"function":"setPermissionGrantState","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"function_hash":"302280238773157148435720193895737547847","length":3292},"id":"ASB-A-515158597-e6eea9e8"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f5cf9571ac81791f9245fd16dfcf42ecd51c793d"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515158597.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-10-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"line_hashes":["71387856242766300111474108755639060906","245722315977399161983952543873526432790","131604536729388262005348928524854859898","182280704221518568893384466448839089670","120435722638721370935691190501569981545","288961117767715855422939441556262966579","22997619993064488372263118631628684631","247303866414399357566020699537269283774"],"threshold":0.9},"id":"ASB-A-515158597-44f27af2"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"line_hashes":["67512861029338814249349861885314635053","290156515777081318189778133334877633745","127925059051352371839438547349036061467"],"threshold":0.9},"id":"ASB-A-515158597-5c3291b9","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"289882715831773007102488547891573017155","length":715},"id":"ASB-A-515158597-7ef18448","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9","target":{"function":"reapplyAllPoliciesOnBootLocked","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"}},{"id":"ASB-A-515158597-adc4d87c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9","target":{"function":"setPermissionGrantState","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"function_hash":"185959690768177997466468579407855435738","length":3837}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/213028e7bf0b005e9db136abd3c50029ee1fa5a9"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515158597.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-10-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["67512861029338814249349861885314635053","290156515777081318189778133334877633745","127925059051352371839438547349036061467"]},"id":"ASB-A-515158597-13ed2dc8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false},{"id":"ASB-A-515158597-22cfd78d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java","function":"reapplyAllPoliciesOnBootLocked"},"deprecated":false,"digest":{"function_hash":"289882715831773007102488547891573017155","length":715}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"line_hashes":["71387856242766300111474108755639060906","245722315977399161983952543873526432790","131604536729388262005348928524854859898","182280704221518568893384466448839089670","120435722638721370935691190501569981545","288961117767715855422939441556262966579","22997619993064488372263118631628684631","247303866414399357566020699537269283774"],"threshold":0.9},"id":"ASB-A-515158597-5b7d299b","signature_type":"Line","signature_version":"v1"},{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"setPermissionGrantState"},"deprecated":false,"digest":{"function_hash":"286901813323477361416805740705243665528","length":3389},"id":"ASB-A-515158597-837489dd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4abace2e8718041eb31f75650e2543fa57e0eb60"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515158597.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-10-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java","function":"setPermissionGrantState"},"deprecated":false,"digest":{"length":3354,"function_hash":"105530994649535162782177526453052955785"},"id":"ASB-A-515158597-573b3ff7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java","function":"reapplyAllPoliciesOnBootLocked"},"deprecated":false,"digest":{"function_hash":"101408601063527151196425862634223347783","length":698},"id":"ASB-A-515158597-7aebade5"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["67512861029338814249349861885314635053","290156515777081318189778133334877633745","127925059051352371839438547349036061467"]},"id":"ASB-A-515158597-813e470e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"line_hashes":["71387856242766300111474108755639060906","245722315977399161983952543873526432790","131604536729388262005348928524854859898","303055045182444199920398436940678675023","120435722638721370935691190501569981545","288961117767715855422939441556262966579","22997619993064488372263118631628684631","247303866414399357566020699537269283774"],"threshold":0.9},"id":"ASB-A-515158597-e81535cb","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/aff383d8541a25fd416b27011d7d2ceb71478ac5"],"severity":"High","spl":"2026-10-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515158597.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-10-01"}]}],"versions":["17"],"ecosystem_specific":{"spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"line_hashes":["67512861029338814249349861885314635053","290156515777081318189778133334877633745","127925059051352371839438547349036061467"],"threshold":0.9},"id":"ASB-A-515158597-7baa0302","signature_type":"Line","signature_version":"v1"},{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"line_hashes":["71387856242766300111474108755639060906","245722315977399161983952543873526432790","131604536729388262005348928524854859898","303055045182444199920398436940678675023","120435722638721370935691190501569981545","288961117767715855422939441556262966579","22997619993064488372263118631628684631","247303866414399357566020699537269283774"],"threshold":0.9},"id":"ASB-A-515158597-87d388da","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994"},{"id":"ASB-A-515158597-93165793","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994","target":{"function":"setPermissionGrantState","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"length":3292,"function_hash":"302280238773157148435720193895737547847"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java","function":"reapplyAllPoliciesOnBootLocked"},"deprecated":false,"digest":{"function_hash":"101408601063527151196425862634223347783","length":698},"id":"ASB-A-515158597-f4d956bc","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/94ce8e563aa9533bfce7d33d2daeab3368ba3994"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515158597.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-10-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4"],"severity":"High","spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java"},"deprecated":false,"digest":{"line_hashes":["99959481176727584204489406590511938161","139814659820484636508263181494233403878","233905006612110556967474936699273831191","15645313722734130202496151787745546194","12717694282970908182014466446689603566","288961117767715855422939441556262966579","22997619993064488372263118631628684631","247303866414399357566020699537269283774"],"threshold":0.9},"id":"ASB-A-515158597-19a3fcda","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4","target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyEngine.java","function":"reapplyAllPoliciesLocked"},"deprecated":false,"digest":{"function_hash":"138360623705418565317349113311700699865","length":651},"id":"ASB-A-515158597-369936f0","signature_type":"Function","signature_version":"v1"},{"target":{"file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"line_hashes":["67512861029338814249349861885314635053","290156515777081318189778133334877633745","127925059051352371839438547349036061467"],"threshold":0.9},"id":"ASB-A-515158597-5d392116","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/c78d9b889cda1fadfc772e41333b7cdd848afcd4","target":{"function":"setPermissionGrantState","file":"services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"},"deprecated":false,"digest":{"length":3399,"function_hash":"181043420025488049292628495150379739863"},"id":"ASB-A-515158597-b8d6f07b","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-515158597.json"}}],"schema_version":"1.9.0"}