ASB-A-381885240
See a problem?- Import Source
- https://storage.googleapis.com/android-osv/ASB-A-381885240.json
- JSON Data
- https://api.osv.dev/v1/vulns/ASB-A-381885240
- Aliases
-
- A-381885240
- CVE-2025-48583
- Published
- 2025-12-01T00:00:00Z
- Modified
- 2026-04-06T15:14:00.904280Z
- Summary
- [none]
- Details
-
In multiple functions of BaseBundle.java, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- References
Affected packages
Android / platform/frameworks/base
Package
Ecosystem specific
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/266bbcd030ff34d09a3adb226b9fc32184c3b7df"
],
"spl": "2025-12-01",
"severity": "High",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"143619953344380945349808832383999587221",
"286088482419454752897083668920640001028",
"170858495998197863390290425140665273806",
"110615400924175761923546864167627389257",
"199891992987289089874250973339042272847",
"108749806646176519988174016819229327407",
"332360363119861887931150936650991658935",
"174920013543140927271118897934018274379",
"284292221036374919610912170287316426200",
"214350779031284022919206397139237238953",
"173746568786115240580331887774006254272",
"2518371267182303715587143145828960760",
"112835875679903889994993851412138680665",
"50255930011592675186927123601724888890",
"96855873368237677560094400731679834550",
"142704835177258080254798267019474560819",
"238204882528022809087318930772490743983",
"145042412466049663842034692563728188068",
"185453565943576272065608264474601783247",
"290904611754225128135947127671502448015",
"190122645023913448121459157689719092314",
"25989062265017724637505550613762711282"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/266bbcd030ff34d09a3adb226b9fc32184c3b7df",
"id": "ASB-A-381885240-019555dc",
"target": {
"file": "core/java/android/os/BaseBundle.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "284473703658618539898650731140527865345",
"length": 671.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/266bbcd030ff34d09a3adb226b9fc32184c3b7df",
"id": "ASB-A-381885240-30e56d8e",
"target": {
"file": "core/java/android/os/Parcel.java",
"function": "recycle"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"276403105727619370977907454966767100842",
"90835928758325504502206226486271879416",
"266439707727820777743736932449010458894",
"208177590637606379406118141748126922086",
"197417365152524084707194007660260456893",
"208202833007587115966697612462513679461",
"136635482043147512751793536099562546364",
"65236846875928434332512998728998408481",
"140543593771012306847280793686663577554",
"148487913652039469187015729328764216376"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/266bbcd030ff34d09a3adb226b9fc32184c3b7df",
"id": "ASB-A-381885240-57793c5f",
"target": {
"file": "core/java/android/os/Parcel.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "46006982700023270702211945646139599328",
"length": 236.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/266bbcd030ff34d09a3adb226b9fc32184c3b7df",
"id": "ASB-A-381885240-6845f0a4",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "clear"
}
},
{
"signature_version": "v1",
"signature_type": "Function",
"match_only_versions": [
"16-qpr2-next"
],
"deprecated": false,
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "recycleParcel"
},
"digest": {
"function_hash": "7014720804021016047949783468580237037",
"length": 106.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/266bbcd030ff34d09a3adb226b9fc32184c3b7df",
"id": "ASB-A-381885240-7c6b7a3f"
},
{
"signature_version": "v1",
"signature_type": "Function",
"match_only_versions": [
"16-qpr2-next"
],
"deprecated": false,
"target": {
"file": "core/java/android/os/Parcel.java",
"function": "freeBuffer"
},
"digest": {
"function_hash": "285475719585484225080224746270989837680",
"length": 158.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/266bbcd030ff34d09a3adb226b9fc32184c3b7df",
"id": "ASB-A-381885240-95203fb3"
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "200759266969230290661157772594372078853",
"length": 736.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/266bbcd030ff34d09a3adb226b9fc32184c3b7df",
"id": "ASB-A-381885240-9dab69cd",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "unwrapLazyValueFromMapLocked"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "260380739112932968784793290585938158310",
"length": 1385.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/266bbcd030ff34d09a3adb226b9fc32184c3b7df",
"id": "ASB-A-381885240-bf5ffa63",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "initializeFromParcelLocked"
}
}
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/728a21be645b3f9f5c0dcdd0b07168ad3d438fb9"
],
"spl": "2025-12-01",
"severity": "High",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "46006982700023270702211945646139599328",
"length": 236.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/728a21be645b3f9f5c0dcdd0b07168ad3d438fb9",
"id": "ASB-A-381885240-49e5b5e2",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "clear"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"143619953344380945349808832383999587221",
"286088482419454752897083668920640001028",
"170858495998197863390290425140665273806",
"110615400924175761923546864167627389257",
"199891992987289089874250973339042272847",
"108749806646176519988174016819229327407",
"332360363119861887931150936650991658935",
"174920013543140927271118897934018274379",
"284292221036374919610912170287316426200",
"214350779031284022919206397139237238953",
"173746568786115240580331887774006254272",
"2518371267182303715587143145828960760",
"112835875679903889994993851412138680665",
"50255930011592675186927123601724888890",
"96855873368237677560094400731679834550",
"142704835177258080254798267019474560819",
"238204882528022809087318930772490743983",
"145042412466049663842034692563728188068",
"185453565943576272065608264474601783247",
"290904611754225128135947127671502448015",
"190122645023913448121459157689719092314",
"25989062265017724637505550613762711282"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/728a21be645b3f9f5c0dcdd0b07168ad3d438fb9",
"id": "ASB-A-381885240-51b80ef6",
"target": {
"file": "core/java/android/os/BaseBundle.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "337646080539226973219399309200324501582",
"length": 1393.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/728a21be645b3f9f5c0dcdd0b07168ad3d438fb9",
"id": "ASB-A-381885240-64b1c748",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "initializeFromParcelLocked"
}
},
{
"signature_version": "v1",
"signature_type": "Function",
"match_only_versions": [
"15"
],
"deprecated": false,
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "recycleParcel"
},
"digest": {
"function_hash": "7014720804021016047949783468580237037",
"length": 106.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/728a21be645b3f9f5c0dcdd0b07168ad3d438fb9",
"id": "ASB-A-381885240-6bbd5b9a"
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"80012019449043672887609934038642438131",
"90835928758325504502206226486271879416",
"266439707727820777743736932449010458894",
"208177590637606379406118141748126922086",
"197417365152524084707194007660260456893",
"208202833007587115966697612462513679461",
"136635482043147512751793536099562546364",
"65236846875928434332512998728998408481",
"140543593771012306847280793686663577554",
"148487913652039469187015729328764216376"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/728a21be645b3f9f5c0dcdd0b07168ad3d438fb9",
"id": "ASB-A-381885240-6d127747",
"target": {
"file": "core/java/android/os/Parcel.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "200759266969230290661157772594372078853",
"length": 736.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/728a21be645b3f9f5c0dcdd0b07168ad3d438fb9",
"id": "ASB-A-381885240-9f403207",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "unwrapLazyValueFromMapLocked"
}
},
{
"signature_version": "v1",
"signature_type": "Function",
"match_only_versions": [
"15"
],
"deprecated": false,
"target": {
"file": "core/java/android/os/Parcel.java",
"function": "freeBuffer"
},
"digest": {
"function_hash": "285475719585484225080224746270989837680",
"length": 158.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/728a21be645b3f9f5c0dcdd0b07168ad3d438fb9",
"id": "ASB-A-381885240-e21e66df"
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "330302876922501969320285702144363611443",
"length": 624.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/728a21be645b3f9f5c0dcdd0b07168ad3d438fb9",
"id": "ASB-A-381885240-f86a8e87",
"target": {
"file": "core/java/android/os/Parcel.java",
"function": "recycle"
}
}
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/d20f3599f89388d181735db351879d2487cc331b"
],
"spl": "2025-12-01",
"severity": "High",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"143619953344380945349808832383999587221",
"286088482419454752897083668920640001028",
"170858495998197863390290425140665273806",
"110615400924175761923546864167627389257",
"199891992987289089874250973339042272847",
"108749806646176519988174016819229327407",
"332360363119861887931150936650991658935",
"174920013543140927271118897934018274379",
"284292221036374919610912170287316426200",
"214350779031284022919206397139237238953",
"173746568786115240580331887774006254272",
"2518371267182303715587143145828960760",
"112835875679903889994993851412138680665",
"50255930011592675186927123601724888890",
"96855873368237677560094400731679834550",
"142704835177258080254798267019474560819",
"238204882528022809087318930772490743983",
"145042412466049663842034692563728188068",
"185453565943576272065608264474601783247",
"290904611754225128135947127671502448015",
"190122645023913448121459157689719092314",
"25989062265017724637505550613762711282"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d20f3599f89388d181735db351879d2487cc331b",
"id": "ASB-A-381885240-18cd1d92",
"target": {
"file": "core/java/android/os/BaseBundle.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "200759266969230290661157772594372078853",
"length": 736.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d20f3599f89388d181735db351879d2487cc331b",
"id": "ASB-A-381885240-32da1ea2",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "unwrapLazyValueFromMapLocked"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"276403105727619370977907454966767100842",
"90835928758325504502206226486271879416",
"266439707727820777743736932449010458894",
"208177590637606379406118141748126922086",
"197417365152524084707194007660260456893",
"208202833007587115966697612462513679461",
"136635482043147512751793536099562546364",
"65236846875928434332512998728998408481",
"140543593771012306847280793686663577554",
"148487913652039469187015729328764216376"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d20f3599f89388d181735db351879d2487cc331b",
"id": "ASB-A-381885240-43833c4a",
"target": {
"file": "core/java/android/os/Parcel.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "260380739112932968784793290585938158310",
"length": 1385.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d20f3599f89388d181735db351879d2487cc331b",
"id": "ASB-A-381885240-bb617986",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "initializeFromParcelLocked"
}
},
{
"signature_version": "v1",
"signature_type": "Function",
"match_only_versions": [
"16"
],
"deprecated": false,
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "recycleParcel"
},
"digest": {
"function_hash": "7014720804021016047949783468580237037",
"length": 106.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d20f3599f89388d181735db351879d2487cc331b",
"id": "ASB-A-381885240-bfb580ff"
},
{
"signature_version": "v1",
"signature_type": "Function",
"match_only_versions": [
"16"
],
"deprecated": false,
"target": {
"file": "core/java/android/os/Parcel.java",
"function": "freeBuffer"
},
"digest": {
"function_hash": "285475719585484225080224746270989837680",
"length": 158.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d20f3599f89388d181735db351879d2487cc331b",
"id": "ASB-A-381885240-c09c01cb"
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "284473703658618539898650731140527865345",
"length": 671.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d20f3599f89388d181735db351879d2487cc331b",
"id": "ASB-A-381885240-d834cb59",
"target": {
"file": "core/java/android/os/Parcel.java",
"function": "recycle"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "46006982700023270702211945646139599328",
"length": 236.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/d20f3599f89388d181735db351879d2487cc331b",
"id": "ASB-A-381885240-e0445e21",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "clear"
}
}
]
}
Android / platform/frameworks/base
Package
Ecosystem specific
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ba507647771b8a8c3481e192a1ba6c8027305237"
],
"spl": "2025-12-01",
"severity": "High",
"types": [
"EoP"
],
"vanir_signatures": [
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "46006982700023270702211945646139599328",
"length": 236.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ba507647771b8a8c3481e192a1ba6c8027305237",
"id": "ASB-A-381885240-0650f8df",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "clear"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "337646080539226973219399309200324501582",
"length": 1393.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ba507647771b8a8c3481e192a1ba6c8027305237",
"id": "ASB-A-381885240-09fd8713",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "initializeFromParcelLocked"
}
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"133025951392166269319845581268729694295",
"12671139100329101586010429016059707143",
"162299566821264737775330129930731748761",
"191715323902013075878596258919932203361",
"88697305904844850341107239285722538069",
"210247925931020430629991040574406743056",
"326795662881850518015248135513219353414",
"332360363119861887931150936650991658935",
"174920013543140927271118897934018274379",
"284292221036374919610912170287316426200",
"214350779031284022919206397139237238953",
"173746568786115240580331887774006254272",
"2518371267182303715587143145828960760",
"112835875679903889994993851412138680665",
"50255930011592675186927123601724888890",
"96855873368237677560094400731679834550",
"142704835177258080254798267019474560819",
"238204882528022809087318930772490743983",
"145042412466049663842034692563728188068",
"185453565943576272065608264474601783247",
"290904611754225128135947127671502448015",
"190122645023913448121459157689719092314",
"25989062265017724637505550613762711282"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ba507647771b8a8c3481e192a1ba6c8027305237",
"id": "ASB-A-381885240-1eb53a8b",
"target": {
"file": "core/java/android/os/BaseBundle.java"
}
},
{
"signature_version": "v1",
"signature_type": "Function",
"match_only_versions": [
"14"
],
"deprecated": false,
"target": {
"file": "core/java/android/os/Parcel.java",
"function": "freeBuffer"
},
"digest": {
"function_hash": "285475719585484225080224746270989837680",
"length": 158.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ba507647771b8a8c3481e192a1ba6c8027305237",
"id": "ASB-A-381885240-6a24dc90"
},
{
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"80012019449043672887609934038642438131",
"90835928758325504502206226486271879416",
"266439707727820777743736932449010458894",
"208177590637606379406118141748126922086",
"197417365152524084707194007660260456893",
"208202833007587115966697612462513679461",
"136635482043147512751793536099562546364",
"65236846875928434332512998728998408481",
"140543593771012306847280793686663577554",
"148487913652039469187015729328764216376"
],
"threshold": 0.9
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ba507647771b8a8c3481e192a1ba6c8027305237",
"id": "ASB-A-381885240-ad8f260d",
"target": {
"file": "core/java/android/os/Parcel.java"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "289686390697361430917964490623996917519",
"length": 818.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ba507647771b8a8c3481e192a1ba6c8027305237",
"id": "ASB-A-381885240-c0d25df3",
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "unwrapLazyValueFromMapLocked"
}
},
{
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "330302876922501969320285702144363611443",
"length": 624.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ba507647771b8a8c3481e192a1ba6c8027305237",
"id": "ASB-A-381885240-c48983f6",
"target": {
"file": "core/java/android/os/Parcel.java",
"function": "recycle"
}
},
{
"signature_version": "v1",
"signature_type": "Function",
"match_only_versions": [
"14"
],
"deprecated": false,
"target": {
"file": "core/java/android/os/BaseBundle.java",
"function": "recycleParcel"
},
"digest": {
"function_hash": "7014720804021016047949783468580237037",
"length": 106.0
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ba507647771b8a8c3481e192a1ba6c8027305237",
"id": "ASB-A-381885240-f4dbdd35"
}
]
}