{"id":"ASB-A-527037031","details":"In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-527037031","CVE-2026-58951"],"modified":"2026-11-02T17:11:18.832740574Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f80e7d72ee06b293f82730860989b4940cff5e18","target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java","function":"getTaskInfo"},"deprecated":false,"digest":{"function_hash":"23394056667128158216516034766682806693","length":446},"id":"ASB-A-527037031-7abc18a4","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f80e7d72ee06b293f82730860989b4940cff5e18","target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"},"deprecated":false,"digest":{"line_hashes":["69174092282766384547908324781490193815","18306198786839114041852296361960324349","189711996945790028369893960436888408465","211744255910082531162263375605353976766","58281556621955240468588132249463076511","92146947252268267278036319613875092516","125013984104910511255005768693803549288","293839546183206198227894606151154351270","257857402019118627350981832294002714675","67625688583437366494376325445906808318"],"threshold":0.9},"id":"ASB-A-527037031-95fb62ca","signature_type":"Line"},{"target":{"file":"services/core/java/com/android/server/wm/Task.java","function":"trimIneffectiveInfo"},"deprecated":false,"digest":{"function_hash":"329305421849309451129452767938588231086","length":2050},"id":"ASB-A-527037031-b7aba6b8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f80e7d72ee06b293f82730860989b4940cff5e18"},{"deprecated":false,"digest":{"line_hashes":["31407212248238245207223337912844507848","231471409976493454407667399354900414954","231513752127828628868018585052900887408","53128861105548090031079767117330558463"],"threshold":0.9},"id":"ASB-A-527037031-ef842c07","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f80e7d72ee06b293f82730860989b4940cff5e18","target":{"file":"services/core/java/com/android/server/wm/Task.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f80e7d72ee06b293f82730860989b4940cff5e18"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-527037031.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/86a6ebc70eee16c5f75831e2b75cb29939244196","target":{"file":"services/core/java/com/android/server/wm/Task.java","function":"trimIneffectiveInfo"},"deprecated":false,"digest":{"function_hash":"137696752643782756070195193960495535448","length":1929},"id":"ASB-A-527037031-10467a8b","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/86a6ebc70eee16c5f75831e2b75cb29939244196","target":{"file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"line_hashes":["31407212248238245207223337912844507848","231471409976493454407667399354900414954","231513752127828628868018585052900887408","53128861105548090031079767117330558463"],"threshold":0.9},"id":"ASB-A-527037031-2518b2ec","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/86a6ebc70eee16c5f75831e2b75cb29939244196","target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["69174092282766384547908324781490193815","18306198786839114041852296361960324349","189711996945790028369893960436888408465","211744255910082531162263375605353976766","338185822325835282635100481254422254974","118599825313511125171041053075850265953","165831923789944329184428295187134769902","293839546183206198227894606151154351270","257857402019118627350981832294002714675","67625688583437366494376325445906808318"]},"id":"ASB-A-527037031-447daf88","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-527037031-feae8bae","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/86a6ebc70eee16c5f75831e2b75cb29939244196","target":{"function":"getTaskInfo","file":"services/core/java/com/android/server/wm/AppTaskImpl.java"},"deprecated":false,"digest":{"function_hash":"39857382199862839908673086156016290601","length":429}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/86a6ebc70eee16c5f75831e2b75cb29939244196"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-527037031.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/13713fd0831d06c0688e4903c3932afbb54971c6","target":{"file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["31407212248238245207223337912844507848","231471409976493454407667399354900414954","231513752127828628868018585052900887408","53128861105548090031079767117330558463"]},"id":"ASB-A-527037031-300a05ec"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/13713fd0831d06c0688e4903c3932afbb54971c6","target":{"function":"trimIneffectiveInfo","file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"length":2059,"function_hash":"104806881104888446029413400535391390865"},"id":"ASB-A-527037031-52530ae1"},{"digest":{"threshold":0.9,"line_hashes":["69174092282766384547908324781490193815","18306198786839114041852296361960324349","189711996945790028369893960436888408465","211744255910082531162263375605353976766","338185822325835282635100481254422254974","118599825313511125171041053075850265953","165831923789944329184428295187134769902","293839546183206198227894606151154351270","257857402019118627350981832294002714675","67625688583437366494376325445906808318"]},"id":"ASB-A-527037031-d7835b8a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/13713fd0831d06c0688e4903c3932afbb54971c6","target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"39857382199862839908673086156016290601","length":429},"id":"ASB-A-527037031-f428177d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/13713fd0831d06c0688e4903c3932afbb54971c6","target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java","function":"getTaskInfo"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/13713fd0831d06c0688e4903c3932afbb54971c6"],"severity":"High","spl":"2026-11-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-527037031.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2603b639456df498018b5d3088a21e04cee65a04"],"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2603b639456df498018b5d3088a21e04cee65a04","target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"},"deprecated":false,"digest":{"line_hashes":["69174092282766384547908324781490193815","18306198786839114041852296361960324349","189711996945790028369893960436888408465","211744255910082531162263375605353976766","338185822325835282635100481254422254974","118599825313511125171041053075850265953","165831923789944329184428295187134769902","293839546183206198227894606151154351270","257857402019118627350981832294002714675","67625688583437366494376325445906808318"],"threshold":0.9},"id":"ASB-A-527037031-0ca718e6","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2603b639456df498018b5d3088a21e04cee65a04","target":{"file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"line_hashes":["31407212248238245207223337912844507848","231471409976493454407667399354900414954","231513752127828628868018585052900887408","53128861105548090031079767117330558463"],"threshold":0.9},"id":"ASB-A-527037031-111e43de","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"39857382199862839908673086156016290601","length":429},"id":"ASB-A-527037031-38ec3260","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2603b639456df498018b5d3088a21e04cee65a04","target":{"function":"getTaskInfo","file":"services/core/java/com/android/server/wm/AppTaskImpl.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2603b639456df498018b5d3088a21e04cee65a04","target":{"function":"trimIneffectiveInfo","file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"length":2059,"function_hash":"104806881104888446029413400535391390865"},"id":"ASB-A-527037031-68b7f7fd"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-527037031.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/eebb44a69a12873f8ff47750895b6cb3617db80e","target":{"function":"getTaskInfo","file":"services/core/java/com/android/server/wm/AppTaskImpl.java"},"deprecated":false,"digest":{"function_hash":"23394056667128158216516034766682806693","length":446},"id":"ASB-A-527037031-16d39a2d","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/eebb44a69a12873f8ff47750895b6cb3617db80e","target":{"file":"services/core/java/com/android/server/wm/Task.java","function":"trimIneffectiveInfo"},"deprecated":false,"digest":{"function_hash":"329305421849309451129452767938588231086","length":2050},"id":"ASB-A-527037031-1b705332"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/eebb44a69a12873f8ff47750895b6cb3617db80e","target":{"file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"line_hashes":["31407212248238245207223337912844507848","231471409976493454407667399354900414954","231513752127828628868018585052900887408","53128861105548090031079767117330558463"],"threshold":0.9},"id":"ASB-A-527037031-325f7b7c","signature_type":"Line"},{"target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["69174092282766384547908324781490193815","18306198786839114041852296361960324349","189711996945790028369893960436888408465","211744255910082531162263375605353976766","58281556621955240468588132249463076511","92146947252268267278036319613875092516","125013984104910511255005768693803549288","293839546183206198227894606151154351270","257857402019118627350981832294002714675","67625688583437366494376325445906808318"]},"id":"ASB-A-527037031-f0b2afc1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/eebb44a69a12873f8ff47750895b6cb3617db80e"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/eebb44a69a12873f8ff47750895b6cb3617db80e"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-527037031.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2026-11-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"length":429,"function_hash":"39857382199862839908673086156016290601"},"id":"ASB-A-527037031-15df138a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1081dbe4a05beec3e65def93ca9cfc0cfba0f7da","target":{"function":"getTaskInfo","file":"services/core/java/com/android/server/wm/AppTaskImpl.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1081dbe4a05beec3e65def93ca9cfc0cfba0f7da","target":{"file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"line_hashes":["31407212248238245207223337912844507848","231471409976493454407667399354900414954","231513752127828628868018585052900887408","53128861105548090031079767117330558463"],"threshold":0.9},"id":"ASB-A-527037031-1afc0a21","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1081dbe4a05beec3e65def93ca9cfc0cfba0f7da","target":{"file":"services/core/java/com/android/server/wm/Task.java","function":"trimIneffectiveInfo"},"deprecated":false,"digest":{"function_hash":"137696752643782756070195193960495535448","length":1929},"id":"ASB-A-527037031-6b5a234b"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1081dbe4a05beec3e65def93ca9cfc0cfba0f7da","target":{"file":"services/core/java/com/android/server/wm/AppTaskImpl.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["69174092282766384547908324781490193815","18306198786839114041852296361960324349","189711996945790028369893960436888408465","211744255910082531162263375605353976766","338185822325835282635100481254422254974","118599825313511125171041053075850265953","165831923789944329184428295187134769902","293839546183206198227894606151154351270","257857402019118627350981832294002714675","67625688583437366494376325445906808318"]},"id":"ASB-A-527037031-74021f21","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1081dbe4a05beec3e65def93ca9cfc0cfba0f7da"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-527037031.json"}}],"schema_version":"1.9.2"}