Package
com.android.cellbroadcastservice
Cell Broadcast Service
Guidance
The AOSP-named build of CellBroadcastService, one half of Android's CellBroadcast module. AOSP documents the service as handling cell broadcast SMS decoding, geofencing for Wireless Emergency Alerts (WEA) 3.0, message duplication checks and broadcasting messages to apps. In the documented message flow the radio layer passes a CDMA or GSM cell broadcast to the framework, which hands it to this service, and the service then forwards it to the default CellBroadcastReceiver app, which displays the alert. The module's AOSP manifest declares this package name, labels it "Cell Broadcast Service", marks the application persistent and direct-boot aware, runs it in the network stack process, and declares the FULL_ACCESS_CELL_BROADCAST_HISTORY signature permission and a CellBroadcastProvider for alert history. Google's builds use com.google.android.cellbroadcastservice, documented separately on this site; the LineageOS and GrapheneOS package-name mappings cited here pair the two names. On this site it is recorded on 11 devices from 11 makes (including Google, Samsung, Zebra Technologies, Elo Touch Solutions, Lenovo and TCL) across OS API levels 30 to 36, and none of the observations mark it as user-facing. Where this site holds signer data, which is 5 of those 11 makes, the Samsung build is signed by a Samsung OEM key that also signs the Android framework, a platform-level key; the TCL build by a TCL OEM key; the Google build by a Google-classified key; and the HUAWEI and OnePlus builds by a key this site classifies as third-party. AOSP separately states that the CellBroadcast module is signed with a Google signature instead of a platform signature; why the Samsung build observed here differs cannot be established from this data. This site records it requesting location (including background location), SMS receive and broadcast, phone state and cell broadcast permissions; this site aggregates permissions across observations rather than per build, so which builds declare each of them cannot be established. Version note: AOSP documents that the CellBroadcastService and CellBroadcastReceiver are packaged in a single APEX (com.android.cellbroadcast) for devices running Android 11 or higher, and that the module migrated existing framework classes into packages/modules/CellBroadcastService. The earliest OS API level recorded for this package on this site is 30 (Android 11), which matches that boundary. For Android Enterprise, EMM and kiosk use, no enrolment or management role is identified in the sources cited here, but on AOSP's documented flow it sits between the radio and the alert display, so disabling it would be expected to stop cell broadcast emergency alerts reaching the receiver app. AOSP's documented flow starts at the radio interface layer, so on a device with no cellular radio it would have no cell broadcasts to process. Treat removal with caution. AOSP documents an Emergency alert settings page that users reach from the Settings app; changing alert settings there is a narrower step than disabling this service.
- CellBroadcast - Android Open Source Project →
- CellBroadcastService AndroidManifest.xml (packages/modules/CellBroadcastService) - AOSP source →
- LineageOS scripts dev/rro/target_package.py (Google to AOSP package names) →
- GrapheneOS arsclib Constants.java PACKAGE_NAME_MAP →
- Package provenance for com.android.cellbroadcastservice - Android System App Database →
Package intelligence
Observed signing, permission, version and size signals from contributing devices - descriptive of that sample, not a verdict. These come from the v2 Package Search sync, which not every device has contributed to yet, so for some packages this detail is partial or not present at all.
- Signed by a third-party certificate (carrier or partner), not stock AOSP or Google, but 4 different certificates appear across the fleet, so OEMs ship their own builds of it.
- Its largest observed manifest declares 12 permissions: 7 runtime (user-granted), 3 signature or system-level, 1 install-time and 1 vendor or uncatalogued.
- Never reported as user-facing, so it runs as a background or system component rather than an app the user opens.
Declared permissions (12)
Largest permission set observed for this package. Text is Android's own published description where one exists; platform permissions Android does not document show their granted protection level (in grey) instead; vendor or unknown constants show the name only.
| Permission | Description |
|---|---|
ACCESS_BACKGROUND_LOCATION |
This app can access location at any time, even while the app is not in use. |
ACCESS_COARSE_LOCATION |
This app can get your approximate location from location services while the app is in use. Location services for your device must be turned on for the app to get location. |
ACCESS_FINE_LOCATION |
This app can get your precise location from location services while the app is in use. Location services for your device must be turned on for the app to get location. This may increase battery usage. |
BROADCAST_SMS |
Signature-level system permission, for platform-signed apps. |
MODIFY_PHONE_STATE |
Signature or privileged system permission. |
READ_CELL_BROADCASTS |
Allows the app to read cell broadcast messages received by your device. Cell broadcast alerts are delivered in some locations to warn you of emergency situations. Malicious apps may interfere with the performance or operation of your device when an emergency cell broadcast is received. |
READ_PHONE_NUMBERS |
Allows the app to access the phone numbers of the device. |
READ_PHONE_STATE |
Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call. |
READ_PRIVILEGED_PHONE_STATE |
Signature or privileged system permission. docs ↗ |
RECEIVE_SMS |
Allows the app to receive and process SMS messages. This means the app could monitor or delete messages sent to your device without showing them to you. |
WAKE_LOCK |
Allows the app to prevent the phone from going to sleep. |
com.android.cellbroadcastservice.FULL_ACCESS_CELL_BROADCAST_HISTORY |
- |
Manage on devices
ADB commands for this package (the inverse of each is included so you can undo). Run from an authorised shell or wire the equivalent into your DPC. Verify on a test device first - this database doesn’t yet classify which packages are safe to change. --user 0 targets the current user; drop it (and use a privileged shell) to act device-wide.
/system, so Restore re-adds it (-k keeps app data)Seen on
Each record is a device profile (make + model + Android version). Each unique handset that syncs against a matching profile will increase the observations of a package, thereby increasing confidence that a package is expected to be on a device.
| OEM | Model | Android | Provenance | Observations | Last seen |
|---|---|---|---|---|---|
| Elo Touch Solutions | 15in-I-Series-5 | Android 14 | - | 12 | 22 Nov 2025 |
| Pixel 10 | Android 16 | 1 | 5 Jun 2026 | ||
| Huawei | HRY-LX1T | Android 11 | Third-party | 1 | 4 Sep 2026 |
| Lenovo | Lenovo TB-7306F | Android 11 | - | 1 | 19 Jul 2025 |
| OnePlus | OnePlus8Pro | Android 11 | Third-party | 32 | 21 Oct 2026 |
| realme | RMX3690 | Android 12 | - | 1 | 25 Nov 2025 |
| Revoview | S6518 | Android 11 | - | 1 | 30 Mar 2026 |
| Samsung | SM-G973U | Android 12 | OEM Samsung | 2 | 31 Aug 2026 |
| Smt_hk | Helium Pro | Android 12 | - | 1 | 19 Jul 2025 |
| TCL | 9566X | Android 15 | OEM TCL | 1 | 13 Mar 2026 |
| Zebra Technologies | TC21 | Android 13 | - | 1 | 6 Sep 2025 |
Known labels
Locale-aware display names seen in the wild.
| Label | Locale | Seen |
|---|---|---|
| Cell Broadcast Service | en-us | 15 |
| Cell Broadcast Service | en-gb | 10 |
| Cell Broadcast Service | en-be | 5 |
| Cell Broadcast Service | en | 3 |
| Cell Broadcast Service | en-au | 3 |
| Cell Broadcast Service | en-jm | 3 |
| Cell Broadcast Service | en-sg | 3 |
| Cell Broadcast Service | 2 | |
| Cell Broadcast Service | en-ng | 2 |
| Cell Broadcast Service | en-za | 2 |
| Cell Broadcast Service | es-us | 2 |
| Cell Broadcast Service | en-ie | 1 |
| Cell Broadcast Service | en-nz | 1 |
| Cell Broadcast Service | en-ph | 1 |
| Cell Broadcast Service | en-tt | 1 |
| Cell Broadcast Service | es-US | 1 |
| Cell Broadcast Service | my-MM | 1 |
| Cell Broadcast Service | my-mm | 1 |
| Cell Broadcast Service | ru-ru | 1 |
| Cell Broadcast Service | th-th | 1 |