A-477935679: Android/platform/frameworks/base vulnerability

Published Nov 1, 2026

Updated

In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

6 affected componentsFixes available

android/platform/frameworks/base>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/frameworks/base>=15:0<15:2026-11-01

15:2026-11-01

android/platform/frameworks/base>=16:0<16:2026-11-01

16:2026-11-01

android/platform/frameworks/base>=16-qpr2:0<16-qpr2:2026-11-01

16-qpr2:2026-11-01

android/platform/frameworks/base>=17:0<17:2026-11-01

17:2026-11-01

android/platform/frameworks/base>=14:0<14:2026-11-01

14:2026-11-01

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 17-qpr2-next:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 15:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 16:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 16-qpr2:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 17:2026-11-01
Upgrade
Upgrade android/platform/frameworks/base to a version that resolves this vulnerability.
Fixed in 14:2026-11-01

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

A-477935679: Android/platform/frameworks/base vulnerability

Affected Software

Remediation

Event History

Company

Resources

Contact