{"id":"ASB-A-525133623","details":"In multiple locations, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-525133623","CVE-2026-58837"],"modified":"2026-11-02T17:11:19.284810339Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["255156781201081225281859411603687717092","293070987469983026754223518943974456879","236473211968419380036099613244031547464","308040606055537248334691826648939412914","189840225009124958682423299511710245059","99253844324105750832328122535284829500","176993688453419779652937881466580784893","118787928366390060394002057044021199941","285688557680339939245191869683462369461","34975149383398808578892052138750963925","239297346265700406582464567790896056868","329714276799701309232429106497211853848","236910305148198124982805683904494209093","17412476527129308768591112579098934525","247884442122427535215246291244743870718","297419764752476220762748647658565150574","254322072292453387950256988307252522684","5098574227328947469600347928874499715","205146513068116257240054971646804267288"]},"id":"ASB-A-525133623-256871e3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/32919fe0590ae6dab8e16a9af4fa75b718089eb2","target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"}},{"deprecated":false,"digest":{"function_hash":"207929354715145024680966856235153426049","length":674},"id":"ASB-A-525133623-604b9b7f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/32919fe0590ae6dab8e16a9af4fa75b718089eb2","target":{"function":"associate","file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"}},{"id":"ASB-A-525133623-778d9bee","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/84f2a62a6059116949597baa9f17226b8c996bf3","target":{"function":"associate","file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"deprecated":false,"digest":{"function_hash":"322212632678466247116401215485355889299","length":1235}},{"id":"ASB-A-525133623-976c68c7","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/84f2a62a6059116949597baa9f17226b8c996bf3","target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"deprecated":false,"digest":{"line_hashes":["88097795025190906598419229617024522463","205136204361005634286915637054227791528","103288127626041577198270278362176333206","52665934682436694898665501987200778068","25699583441627174877978878456555234235","105826114046037305035978579635500210657","181083594407065548247723782316228398183","205487136278303960357644611506064067795","98310130469283987562261388978648755122","257193650944862988170818522074947997428","52467946730781958153216541048215941512","80348255877217338548350974936912624741","251939309453932992910797904107522251274","3955931896430825694984091434313537336","184221937480058465391464904948738319936","73693591890026691809236900550370277014","192518439122396214295498939487556502912","4338369658882217085758492973669655523"],"threshold":0.9}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/59d9f7b361c4bc7af2bec3dd6730a212dae89bc8","target":{"file":"services/core/java/com/android/server/wm/BackgroundActivityStartController.java"},"deprecated":false,"digest":{"line_hashes":["258761508731383338062245540982726913469","66624188022379625068501346226040845899","324398164463981134670368329703281555186","294334225619865601991780228733152045900","96135752743110172549510905654940698603","229086868884248565292437370547018229698","197664765353177713067384837741191421135","165620453168173442316981697178505114276","304957425510180507133218060659657714597"],"threshold":0.9},"id":"ASB-A-525133623-b4c78f3f","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/32919fe0590ae6dab8e16a9af4fa75b718089eb2","https://android.googlesource.com/platform/frameworks/base/+/84f2a62a6059116949597baa9f17226b8c996bf3","https://android.googlesource.com/platform/frameworks/base/+/59d9f7b361c4bc7af2bec3dd6730a212dae89bc8"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/35c87b62ed11c7ae4138680f0fc3e5c025e5742e","target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java","function":"associate"},"deprecated":false,"digest":{"function_hash":"51287810560462348188484537280553425043","length":351},"id":"ASB-A-525133623-12915154","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/35c87b62ed11c7ae4138680f0fc3e5c025e5742e","target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"deprecated":false,"digest":{"line_hashes":["168877967087863053870882480064379440127","236578004079345091192294599369112989513","191971767302067486367683118839563872675"],"threshold":0.9},"id":"ASB-A-525133623-8f4890cf","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/35c87b62ed11c7ae4138680f0fc3e5c025e5742e"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9d225e2295caac3ac1a12b9c9a4cc4982dc95ad0","target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java","function":"associate"},"deprecated":false,"digest":{"function_hash":"29068247425018024254182592741349855385","length":596},"id":"ASB-A-525133623-1f14c04a"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/9d225e2295caac3ac1a12b9c9a4cc4982dc95ad0","target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"deprecated":false,"digest":{"line_hashes":["73114256134889800685881944478806072288","5098574227328947469600347928874499715","205146513068116257240054971646804267288"],"threshold":0.9},"id":"ASB-A-525133623-3704a413","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9d225e2295caac3ac1a12b9c9a4cc4982dc95ad0"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["73114256134889800685881944478806072288","5098574227328947469600347928874499715","205146513068116257240054971646804267288"],"threshold":0.9},"id":"ASB-A-525133623-440da5fd","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6e28696098cd74cb53b5b155bcef0ee0421fd6d0","target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"deprecated":false},{"target":{"function":"associate","file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"deprecated":false,"digest":{"function_hash":"29068247425018024254182592741349855385","length":596},"id":"ASB-A-525133623-9b074b00","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6e28696098cd74cb53b5b155bcef0ee0421fd6d0"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6e28696098cd74cb53b5b155bcef0ee0421fd6d0"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"207929354715145024680966856235153426049","length":674},"id":"ASB-A-525133623-72a381fd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/312601eb27381c22aca7fb67a5b2a238e84645f2","target":{"function":"associate","file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/312601eb27381c22aca7fb67a5b2a238e84645f2","target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"deprecated":false,"digest":{"line_hashes":["254322072292453387950256988307252522684","5098574227328947469600347928874499715","205146513068116257240054971646804267288"],"threshold":0.9},"id":"ASB-A-525133623-c85d506a","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/312601eb27381c22aca7fb67a5b2a238e84645f2"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"51287810560462348188484537280553425043","length":351},"id":"ASB-A-525133623-73f6da19","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3667ae22044946a1ac4166969c281f96fd4efdad","target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java","function":"associate"}},{"digest":{"threshold":0.9,"line_hashes":["168877967087863053870882480064379440127","236578004079345091192294599369112989513","191971767302067486367683118839563872675"]},"id":"ASB-A-525133623-886106d2","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3667ae22044946a1ac4166969c281f96fd4efdad","target":{"file":"services/companion/java/com/android/server/companion/CompanionDeviceManagerService.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3667ae22044946a1ac4166969c281f96fd4efdad"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-525133623.json"}}],"schema_version":"1.9.2"}