ASB-A-505067993: Input Validation

Q: What level of access does an attacker need to exploit this issue?

An attacker needs local access to the affected device. No additional execution privileges are required.

Q: Does exploitation require user interaction?

No. The issue can be exploited without user interaction.

Q: What is the potential impact of successful exploitation?

Successful exploitation could allow local escalation of privilege through a policy desynchronization in NotificationManagerService.

Published Nov 1, 2026

Updated

In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

6 affected componentsFixes available

android/platform/frameworks/base>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/frameworks/base>=15:0<15:2026-11-01

15:2026-11-01

android/platform/frameworks/base>=16:0<16:2026-11-01

16:2026-11-01

android/platform/frameworks/base>=16-qpr2:0<16-qpr2:2026-11-01

16-qpr2:2026-11-01

android/platform/frameworks/base>=17:0<17:2026-11-01

17:2026-11-01

android/platform/frameworks/base>=14:0<14:2026-11-01

14:2026-11-01

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker needs local access to the affected device. No additional execution privileges are required.

Does exploitation require user interaction?

No. The issue can be exploited without user interaction.

What is the potential impact of successful exploitation?

Successful exploitation could allow local escalation of privilege through a policy desynchronization in NotificationManagerService.

ASB-A-505067993: Input Validation

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Does exploitation require user interaction?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Does exploitation require user interaction?

What is the potential impact of successful exploitation?