{"id":"ASB-A-527038421","details":"In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-527038421","CVE-2026-58979"],"modified":"2026-11-02T16:56:25.409657073Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["249309817643782379465478961047643927765","223521962881983595675711839722904548260","19678127559003501492536837222623819979","78229633562349872921851902069702094313","279916090211245221095979722016736977644","206838325010810148846526824119169754973","118939009967577808194298079904015945161","105135349804760838859480469610730392589","277167926992506182066285464212271669244","239023834931436034751817181904137659087"],"threshold":0.9},"id":"ASB-A-527038421-0906bc21","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3b4aad43843d0b10d4cdedcd6905b4b8b5ea0607","target":{"file":"services/core/java/com/android/server/wm/PresentationController.java"}},{"digest":{"function_hash":"40243082470080854787806834916895024560","length":1300},"id":"ASB-A-527038421-99c1eaee","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3b4aad43843d0b10d4cdedcd6905b4b8b5ea0607","target":{"file":"services/core/java/com/android/server/wm/PresentationController.java","function":"canPresent"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/3b4aad43843d0b10d4cdedcd6905b4b8b5ea0607"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-527038421.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"digest":{"length":1088,"function_hash":"179926471240828294546952046396406015179"},"id":"ASB-A-527038421-0a1041ed","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ec88ac8e2fc5a67d745907f0bb8d27cc5ceac6b7","target":{"file":"services/core/java/com/android/server/wm/PresentationController.java","function":"canPresent"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ec88ac8e2fc5a67d745907f0bb8d27cc5ceac6b7","target":{"file":"services/core/java/com/android/server/wm/PresentationController.java"},"deprecated":false,"digest":{"line_hashes":["249309817643782379465478961047643927765","223521962881983595675711839722904548260","155372890749952331468941875267420036444","238059584153962421690127047454601774012","155907099151401795935103625087990243997","49037834033598096853251754760236272046","105135349804760838859480469610730392589","277167926992506182066285464212271669244","239023834931436034751817181904137659087"],"threshold":0.9},"id":"ASB-A-527038421-7bd967db","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/ec88ac8e2fc5a67d745907f0bb8d27cc5ceac6b7"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-527038421.json"}}],"schema_version":"1.9.2"}