{"id":"ASB-A-546680461","details":"In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-546680461","CVE-2026-59016"],"modified":"2026-11-02T17:11:10.323218993Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/packages/modules/Profiling","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"20161584327155032594718237742584927718","length":909},"id":"ASB-A-546680461-eb6a8b92","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/e5e649dd60542f17bc9d3988fb8afd24911a3c8f","target":{"function":"sendAnomalyProfile","file":"service/java/com/android/os/profiling/ProfilingService.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/e5e649dd60542f17bc9d3988fb8afd24911a3c8f","target":{"file":"service/java/com/android/os/profiling/ProfilingService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["255897921635421383212420784793270608327","183488684589237912615299403667351918667","44514704497823586133168710628981259632","286840604955630179333664794105179859699","12960698460664676154307568725070023154","224496974468946076767633775442693884088"]},"id":"ASB-A-546680461-ec139565","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Profiling/+/e5e649dd60542f17bc9d3988fb8afd24911a3c8f"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-546680461.json"}},{"package":{"name":"platform/packages/modules/Profiling","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"digest":{"line_hashes":["170025569350722873022405148108059991295","187107197364476170204425312909464333701","26464785530273408382519498777086689494","286840604955630179333664794105179859699","12960698460664676154307568725070023154","224496974468946076767633775442693884088"],"threshold":0.9},"id":"ASB-A-546680461-5b614d84","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/e954b0f8155ea02b46156ebe478bc66593855aca","target":{"file":"service/java/com/android/os/profiling/ProfilingService.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/e954b0f8155ea02b46156ebe478bc66593855aca","target":{"file":"service/java/com/android/os/profiling/ProfilingService.java","function":"sendAnomalyProfile"},"deprecated":false,"digest":{"function_hash":"306417297643674747728930904855381215713","length":876},"id":"ASB-A-546680461-a02beddb","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Profiling/+/e954b0f8155ea02b46156ebe478bc66593855aca"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-546680461.json"}}],"schema_version":"1.9.2"}