ASB-A-527038421: Android/platform/frameworks/base vulnerability

Q: What access does an attacker need to exploit this issue?

An attacker needs local access to the affected Android framework component. No additional execution privileges and no user interaction are required.

Q: What is the potential impact?

Successful exploitation could allow local escalation of privilege through a permission bypass in PresentationController.java.

Published Nov 1, 2026

Updated

In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

2 affected componentsFixes available

android/platform/frameworks/base>=17-qpr2-next:0<17-qpr2-next:2026-11-01

17-qpr2-next:2026-11-01

android/platform/frameworks/base>=17:0<17:2026-11-01

17:2026-11-01

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

An attacker needs local access to the affected Android framework component. No additional execution privileges and no user interaction are required.

What is the potential impact?

Successful exploitation could allow local escalation of privilege through a permission bypass in PresentationController.java.

ASB-A-527038421: Android/platform/frameworks/base vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact?