ASB-A-391895923
See a problem?- Import Source
- https://storage.googleapis.com/android-osv/ASB-A-391895923.json
- JSON Data
- https://api.osv.dev/v1/vulns/ASB-A-391895923
- Aliases
-
- A-391895923
- CVE-2025-26456
- Published
- 2025-06-01T00:00:00Z
- Modified
- 2026-04-17T15:55:28.020024Z
- Summary
- [none]
- Details
-
In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
- References
-
- https://source.android.com/security/bulletin/2025-06-01
- https://android.googlesource.com/platform/art/+/1aedae6e1049aa794b3554183bf07634c8fa291b
- https://android.googlesource.com/platform/art/+/3c76194d116bad95e11bda345feaedda6c02c8b4
- https://android.googlesource.com/platform/art/+/06a99377e368b688dbeb4e6bb11b6e1dfca8bb70
Affected packages
Android / platform/art
Package
- Name
- platform/art
Ecosystem specific
{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0",
"https://android.googlesource.com/platform/art/+/abeeacd902042cb2e4941ad66608f8bc526613d4",
"https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142"
],
"spl": "2025-06-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/abeeacd902042cb2e4941ad66608f8bc526613d4",
"target": {
"function": "pathExists",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "299553353509159869573557185011998636106",
"length": 81.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-08920520"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142",
"target": {
"function": "pathExists",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "275431871608720134524001847305554475878",
"length": 121.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-0d661c03"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0",
"target": {
"function": "setUp",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "62937626598064429094515536754744738950",
"length": 3126.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-0e0355a3"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0",
"target": {
"function": "addSecondaryDexUse",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "249648057014312675203714597526919933606",
"length": 647.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-1740c90f"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/abeeacd902042cb2e4941ad66608f8bc526613d4",
"target": {
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"94543860069623832859978843316000753940",
"291194054641192588129976044323466254636",
"328030294175273905582049628739280480704",
"220645793437199142836825259284282726525",
"245449575711656698391507885506761708943",
"214428111201652202160851938288149430037",
"263913645955056348265201578400530291670",
"264400355864513340904518538732876346089",
"231583727746099576009044919130418065786",
"269056640175913739316291109257000546942",
"130723815597183849923584660530590790712",
"171629652321944879289431868290636931536",
"121272157897745064213469777231176901190",
"54025798055334898522857707900833145384",
"323461486084222194699375701021828394063"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-5fdf1739"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142",
"target": {
"function": "setUp",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "187756457512473423088725639316824366379",
"length": 3330.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-6784839d"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142",
"target": {
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"336990301467706349997244651464608568321",
"317165284169108821501912102978848283804",
"272928517208392030103892590047047860240",
"150588831830640555678714604901509310777",
"44034283766847115601134121949177572159",
"305519081207153531438325093701714506313",
"23513580319047987406463670771103448808",
"164219302872146538573224725596957323022",
"208232769371567365905389101138933161799",
"165126536519425582873457290095520576975",
"188807015852223086785189329693510974928",
"201901272825614035736613173409534237642",
"174243942391325278232546840622772064988",
"83384030502367181313380955619727042955",
"43129574426922756494884477725881291923",
"83127098586891353383884925585850550413",
"138415524260726283489235927796052297427",
"126254733561500118443532847490000752241",
"48794065108089139649049113312503897717",
"269525410256722887469757132755372443323",
"103061607395310160638587065634884869751",
"156083884580126286989014558042988381907",
"315401851344107805454170026931525484130",
"133291313493126263256173187938730974203",
"269388193677163360423441995971014730078",
"266006803897833490947252873498433494533",
"23620090979314397730903229590144663207",
"290588909001243261479780096351625529901",
"273905647135878697516241834536563840316",
"113454901949391092049509236838952939588",
"272105715645238163773319864874912236116",
"40235037406485617716053223503126098025",
"26073833694292395618452820725107674088",
"233874941865070704759892972054247197190",
"263228255430069703959574178198437393292",
"132091262867948287877796301726201533141",
"218571972811535318687997148158949323351",
"296890651866941796456978792986465779807"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-68b73ed4"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142",
"target": {
"function": "addSecondaryDexUse",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "228262016172432063790224474968006253391",
"length": 1076.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-70f31c4e"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142",
"target": {
"function": "testInternalSecondaryDexPath",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "58099342107126568692779602153918628768",
"length": 523.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-78341acf"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0",
"target": {
"function": "testCheckedSecondaryDexNotFound",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "185584623635308220963085662172021588769",
"length": 634.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-96b42920"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0",
"target": {
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"200485123148368281770258116076868279632",
"12350881795632446307777177959331197868",
"138232501391104011704615374079305383757",
"50554865919037574572768049311203219134",
"285690183793988460692664163032356304664",
"44750235928440590431244313523857389054",
"255182489921865741717226430474273031435",
"288102526923679092995539757870836904785",
"211901171735739132332703132579920790970",
"182460539971431521483579646520657172981",
"10654695667272462295420199297276510678",
"121099595867807445903045262806522713070",
"86795767129634862298396401600325122353",
"221356326604606193243741983361043264118",
"121668248732915830279160296038500492906",
"18870451775600539216306293799002885646",
"236262182971358847705652206652305665209",
"146286030541729668093805215210905412767",
"55114727769426493051640802165533780459",
"25039196837365637772318333753016926945",
"238314555517266882008540451195632599644",
"128395032515159914628488386805296594581",
"16876290767386525483941153328978917090",
"43638629433148888697825685468283716018",
"323967419776715422283356550524471346781",
"176697584801695231215987403651528999635",
"255002633012744002964610151363401621269",
"229777713772947729848827538193110069681",
"155672489177411244165746531625220359548",
"248360583347851375659789556504838122171",
"228663860939370620914933678792545343238",
"94276766130688051283104899645473405855",
"148643490108232907572826266809131190862",
"329105362954898102387363477383465610287",
"150937712155500320174375513238374909052",
"207095367046529625576621597684319312298"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-a456133e"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142",
"target": {
"function": "testNonexistingExternalSecondaryDexPath",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "328068064325472658298908182984982574503",
"length": 454.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-c132d1d5"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142",
"target": {
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"255205638551190901819645530516797478923",
"242955119628042198906581019849562757673",
"328543589208336430359273283465655516425",
"217753087070112980002303513115933811987",
"211315612979825855665182422034856720987",
"231583727746099576009044919130418065786",
"269056640175913739316291109257000546942",
"130723815597183849923584660530590790712",
"311506600324395775396197986357284810242",
"109194018135900709144637952002686430717",
"170050332730256088713256268599894803560",
"84504271732578418433826114433089949774",
"89863197748422552557561316345324355318",
"267309854935835806676018346046486626033",
"96238776414982220604180076405593025444",
"108564195631499650013550360639602242494",
"21813542013078623528834830066294199995",
"148643490108232907572826266809131190862"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-ccb00346"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0",
"target": {
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"246920179368425184742889956334177478561",
"300434166166235760881209661513561451988",
"172372203267334639351095012824153242023",
"210907713244430240045644601563421210340",
"295896669371220903032008196394006709500",
"227914724199322400007275878553342263952",
"12147733836908049913621754406609010501",
"10339080979495841751629061990847161284",
"41428698293212762553678004389491252336",
"77092719997310488594423681126751058935",
"332125177633054952363736516172347181410",
"243841962851476336183716591314325181407",
"246197651180854714997515174450293622994",
"210510349088955376612600500784663782511",
"58291839265245724707822121483895000475",
"323078065247345462156961797904860277426",
"100070028891851176549946914719505056379",
"23564602304713283158419162233450638107",
"159850368862483951999679417325847737864",
"117660126534068647570049739370568135665",
"292776739699687438931793260656296943100",
"97599160241550540476843476926830273193",
"155503700740545471144802345455610684316",
"242190389227536719299395718976678632750",
"101859554131030402130733253961247054397",
"94834674039134911944856101144678112058",
"249884441570758545419441519124725685969",
"9162182860972042307800585040333853946",
"324734410039052717035056707159210752072",
"216358991983368123864077221099141394497",
"171373932383633512783707124947595790344",
"145171597538424270412822324899064314"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-dc93fc55"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142",
"target": {
"function": "testExistingExternalSecondaryDexPath",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "45072792246128618471288065887810481460",
"length": 453.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-e306ced4"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0",
"target": {
"function": "validateInputs",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "238576455904052616332598812520474057521",
"length": 537.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-f49a19f7"
}
],
"types": [
"DoS"
]
}
Android / platform/art
Package
- Name
- platform/art
Ecosystem specific
{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06",
"https://android.googlesource.com/platform/art/+/5dabc78c06b506e6b247d557157f4ab05147082b",
"https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc"
],
"spl": "2025-06-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/5dabc78c06b506e6b247d557157f4ab05147082b",
"target": {
"function": "pathExists",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "299553353509159869573557185011998636106",
"length": 81.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-1c093b30"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc",
"target": {
"function": "setUp",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "295573709489165572000533141998752912775",
"length": 2844.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-1c92110b"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc",
"target": {
"function": "testNonexistingExternalSecondaryDexPath",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "328068064325472658298908182984982574503",
"length": 454.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-1ca293e0"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06",
"target": {
"function": "addSecondaryDexUse",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "273509523204253499427553388766810751721",
"length": 644.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-1d9be679"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc",
"target": {
"function": "testExistingExternalSecondaryDexPath",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "45072792246128618471288065887810481460",
"length": 453.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-24fdeb88"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06",
"target": {
"function": "validateInputs",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "238576455904052616332598812520474057521",
"length": 537.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-283386a1"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06",
"target": {
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"246920179368425184742889956334177478561",
"300434166166235760881209661513561451988",
"172372203267334639351095012824153242023",
"210907713244430240045644601563421210340",
"137943571257848796641256803278624415758",
"75157731136968179402362206102189725233",
"280092468738813714764907231404846748316",
"82599498954669824694942330736718338165",
"176949732893622656208412396143475891559",
"77092719997310488594423681126751058935",
"332125177633054952363736516172347181410",
"207470678971003178086911286184033102967",
"312115688481984695114829403327054155255",
"32425353920823467734474676343492286103",
"43589506392469308440645341537625197279",
"323078065247345462156961797904860277426",
"100070028891851176549946914719505056379",
"23564602304713283158419162233450638107",
"159850368862483951999679417325847737864",
"117660126534068647570049739370568135665",
"292776739699687438931793260656296943100",
"97599160241550540476843476926830273193",
"155503700740545471144802345455610684316",
"242190389227536719299395718976678632750",
"101859554131030402130733253961247054397",
"94834674039134911944856101144678112058",
"249884441570758545419441519124725685969",
"9162182860972042307800585040333853946",
"324734410039052717035056707159210752072",
"216358991983368123864077221099141394497",
"171373932383633512783707124947595790344",
"145171597538424270412822324899064314"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-2b5ead20"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06",
"target": {
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"200485123148368281770258116076868279632",
"12350881795632446307777177959331197868",
"138232501391104011704615374079305383757",
"255182489921865741717226430474273031435",
"288102526923679092995539757870836904785",
"211901171735739132332703132579920790970",
"182460539971431521483579646520657172981",
"10654695667272462295420199297276510678",
"121099595867807445903045262806522713070",
"86795767129634862298396401600325122353",
"44643296132352797322588111879836481725",
"224504926779848771459464951366159821279",
"237997137506900340366559784236062522979",
"12538730181511590343500416470905944231",
"146286030541729668093805215210905412767",
"55114727769426493051640802165533780459",
"25039196837365637772318333753016926945",
"238314555517266882008540451195632599644",
"128395032515159914628488386805296594581",
"16876290767386525483941153328978917090",
"43638629433148888697825685468283716018",
"323967419776715422283356550524471346781",
"176697584801695231215987403651528999635",
"255002633012744002964610151363401621269",
"229777713772947729848827538193110069681",
"155672489177411244165746531625220359548",
"248360583347851375659789556504838122171",
"228663860939370620914933678792545343238",
"94276766130688051283104899645473405855",
"148643490108232907572826266809131190862",
"152567044227563996126353865084055883567",
"324842873139825397464978644670904536274",
"281828074789684031346703254555622928440"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-46739499"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06",
"target": {
"function": "setUp",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "141431907201761170357304221257073637542",
"length": 2640.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-496b2f9a"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc",
"target": {
"function": "testInternalSecondaryDexPath",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "58099342107126568692779602153918628768",
"length": 523.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-49c79d27"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/5dabc78c06b506e6b247d557157f4ab05147082b",
"target": {
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"267180458000448794317130431845633489790",
"292829385474332695818876887234652648780",
"174606353037526087261248939122612355412",
"282530792743788857774403975238086018211",
"245449575711656698391507885506761708943",
"214428111201652202160851938288149430037",
"263913645955056348265201578400530291670",
"264400355864513340904518538732876346089",
"231583727746099576009044919130418065786",
"269056640175913739316291109257000546942",
"130723815597183849923584660530590790712",
"171629652321944879289431868290636931536",
"121272157897745064213469777231176901190",
"54025798055334898522857707900833145384",
"323461486084222194699375701021828394063"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-5c0949e1"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06",
"target": {
"function": "testCheckedSecondaryDexNotFound",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "185584623635308220963085662172021588769",
"length": 634.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-6959db9f"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc",
"target": {
"function": "addSecondaryDexUse",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "82820278455054713388214593140231154229",
"length": 1073.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-6b9deadd"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc",
"target": {
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"255923694983596607443232763547775229197",
"247068480493375023812443363914136126940",
"108104311778210791992857805566338430270",
"52371615773571806232934324378870878955",
"231583727746099576009044919130418065786",
"269056640175913739316291109257000546942",
"130723815597183849923584660530590790712",
"311506600324395775396197986357284810242",
"109194018135900709144637952002686430717",
"170050332730256088713256268599894803560",
"84504271732578418433826114433089949774",
"89863197748422552557561316345324355318",
"267309854935835806676018346046486626033",
"96238776414982220604180076405593025444",
"108564195631499650013550360639602242494",
"21813542013078623528834830066294199995",
"148643490108232907572826266809131190862"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-9bb77096"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc",
"target": {
"function": "pathExists",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "275431871608720134524001847305554475878",
"length": 121.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-dee6b4f7"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc",
"target": {
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"47542920683160742393168836598120345611",
"317165284169108821501912102978848283804",
"272928517208392030103892590047047860240",
"150588831830640555678714604901509310777",
"44034283766847115601134121949177572159",
"305519081207153531438325093701714506313",
"23513580319047987406463670771103448808",
"164219302872146538573224725596957323022",
"208232769371567365905389101138933161799",
"165126536519425582873457290095520576975",
"188807015852223086785189329693510974928",
"201901272825614035736613173409534237642",
"174243942391325278232546840622772064988",
"83384030502367181313380955619727042955",
"43129574426922756494884477725881291923",
"83127098586891353383884925585850550413",
"138415524260726283489235927796052297427",
"126254733561500118443532847490000752241",
"48794065108089139649049113312503897717",
"269525410256722887469757132755372443323",
"103061607395310160638587065634884869751",
"156083884580126286989014558042988381907",
"315401851344107805454170026931525484130",
"133291313493126263256173187938730974203",
"269388193677163360423441995971014730078",
"266006803897833490947252873498433494533",
"23620090979314397730903229590144663207",
"290588909001243261479780096351625529901",
"273905647135878697516241834536563840316",
"113454901949391092049509236838952939588",
"272105715645238163773319864874912236116",
"40235037406485617716053223503126098025",
"26073833694292395618452820725107674088",
"233874941865070704759892972054247197190",
"263228255430069703959574178198437393292",
"132091262867948287877796301726201533141",
"218571972811535318687997148158949323351",
"296890651866941796456978792986465779807"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-ff9ba910"
}
],
"types": [
"DoS"
]
}
Android / platform/art
Package
- Name
- platform/art
Ecosystem specific
{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17",
"https://android.googlesource.com/platform/art/+/a6c55d59cee838e4dc62b92b9e931a29a37140b9",
"https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce"
],
"spl": "2025-06-01",
"vanir_signatures": [
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17",
"target": {
"function": "testFilteredDetailedSecondaryDexFilteredDueToNotFound",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "29054673170634160695577513127237579168",
"length": 322.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-17f59478"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce",
"target": {
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"255923694983596607443232763547775229197",
"247068480493375023812443363914136126940",
"108104311778210791992857805566338430270",
"52371615773571806232934324378870878955",
"231583727746099576009044919130418065786",
"279649132554763553239576922432417819578",
"12318033329205650438753758493793998389",
"321653698726800928635896197474029532730",
"160856827868417392990008177234609762838",
"170050332730256088713256268599894803560",
"84504271732578418433826114433089949774",
"89863197748422552557561316345324355318",
"267309854935835806676018346046486626033",
"96238776414982220604180076405593025444",
"108564195631499650013550360639602242494",
"21813542013078623528834830066294199995",
"148643490108232907572826266809131190862"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-205c59ad"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce",
"target": {
"function": "testNonexistingExternalSecondaryDexPath",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "328068064325472658298908182984982574503",
"length": 454.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-21dd2611"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17",
"target": {
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"170217590955102315129436640076146764798",
"12350881795632446307777177959331197868",
"138232501391104011704615374079305383757",
"255182489921865741717226430474273031435",
"288102526923679092995539757870836904785",
"211901171735739132332703132579920790970",
"182460539971431521483579646520657172981",
"10654695667272462295420199297276510678",
"121099595867807445903045262806522713070",
"86795767129634862298396401600325122353",
"44643296132352797322588111879836481725",
"224504926779848771459464951366159821279",
"237997137506900340366559784236062522979",
"12538730181511590343500416470905944231",
"146286030541729668093805215210905412767",
"55114727769426493051640802165533780459",
"25039196837365637772318333753016926945",
"238314555517266882008540451195632599644",
"168003966033203981044171890587363598746",
"229943055412142998971552297181578866223",
"145756402949580341469947385010477445339",
"289976052292454928446359732717093313132",
"140869341741296435513857178850342120125",
"275975055275954139855944439069326228425",
"278471894771755664457048146553763478507",
"148263913197149786697179840970104606302",
"228663860939370620914933678792545343238",
"94276766130688051283104899645473405855",
"148643490108232907572826266809131190862",
"65558048112254572398339100942196494920",
"203044786745365589644752492016732516537",
"142915345027217816409009941307111879549"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-3dc99ac2"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce",
"target": {
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"119723284313821438142363953253162477540",
"317165284169108821501912102978848283804",
"272928517208392030103892590047047860240",
"150588831830640555678714604901509310777",
"119586148956141779935379802031519576029",
"305519081207153531438325093701714506313",
"23513580319047987406463670771103448808",
"164219302872146538573224725596957323022",
"208232769371567365905389101138933161799",
"165126536519425582873457290095520576975",
"188807015852223086785189329693510974928",
"201901272825614035736613173409534237642",
"174243942391325278232546840622772064988",
"83384030502367181313380955619727042955",
"43129574426922756494884477725881291923",
"83127098586891353383884925585850550413",
"138415524260726283489235927796052297427",
"126254733561500118443532847490000752241",
"48794065108089139649049113312503897717",
"269525410256722887469757132755372443323",
"103061607395310160638587065634884869751",
"156083884580126286989014558042988381907",
"315401851344107805454170026931525484130",
"133291313493126263256173187938730974203",
"269388193677163360423441995971014730078",
"266006803897833490947252873498433494533",
"23620090979314397730903229590144663207",
"290588909001243261479780096351625529901",
"273905647135878697516241834536563840316",
"113454901949391092049509236838952939588",
"272105715645238163773319864874912236116",
"40235037406485617716053223503126098025",
"26073833694292395618452820725107674088",
"233874941865070704759892972054247197190",
"263228255430069703959574178198437393292",
"132091262867948287877796301726201533141",
"218571972811535318687997148158949323351",
"296890651866941796456978792986465779807"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-5534ebf2"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17",
"target": {
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"246920179368425184742889956334177478561",
"49025061680502520548067025464014861111",
"331509126817414260876315283044028328453",
"77231307414088286668841647703964495441",
"247897606420639288174599437741143428274",
"158689142331068052617647191277720524051",
"10718265856934865017876710016841911379",
"191058040915179795571039969632256812472",
"45849260525745847753841400481884993987",
"77092719997310488594423681126751058935",
"332125177633054952363736516172347181410",
"149256874735926979443308597324025906140",
"179896074926556515401105230220874550466",
"290427759273955462742039437761986768231",
"275360064659256812263969039085718190573",
"302736476698288223624351332634030658420",
"296155611755737129290252174555705934045",
"176751836881140811965528043415643335225",
"102790580513275357915806628882477593492",
"90535323044275120267037675549401439507",
"173407394989770863140351713809264399327",
"34073020546358392786369860426142336921",
"213428740246424649167575477005508589498",
"97599160241550540476843476926830273193",
"130875130195140825014656541939730598046",
"116008578122895639233098055791962274001",
"170501735963008568266230579484835451990",
"242700071725094147505416281656097992380",
"80425157302806154401822695576555431144",
"114996004764564992387181508484359848599",
"22697215923606710463868990681222536718",
"258281255224721877063657538792273245881",
"181276538554369565295310407157459590351",
"238691440652591925217585783638279755276",
"145171597538424270412822324899064314"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-5a68c71a"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17",
"target": {
"function": "setUp",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "311667797362775579675270490353012483965",
"length": 2157.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-7496641c"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce",
"target": {
"function": "testExistingExternalSecondaryDexPath",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "45072792246128618471288065887810481460",
"length": 453.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-776cf6aa"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17",
"target": {
"function": "addSecondaryDexUse",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "273509523204253499427553388766810751721",
"length": 644.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-77dd2470"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/a6c55d59cee838e4dc62b92b9e931a29a37140b9",
"target": {
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"line_hashes": [
"267180458000448794317130431845633489790",
"292829385474332695818876887234652648780",
"174606353037526087261248939122612355412",
"282530792743788857774403975238086018211",
"245449575711656698391507885506761708943",
"214428111201652202160851938288149430037",
"263913645955056348265201578400530291670",
"264400355864513340904518538732876346089",
"231583727746099576009044919130418065786",
"279649132554763553239576922432417819578",
"12318033329205650438753758493793998389",
"171629652321944879289431868290636931536",
"121272157897745064213469777231176901190",
"54025798055334898522857707900833145384",
"323461486084222194699375701021828394063"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "ASB-A-391895923-a531792e"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce",
"target": {
"function": "pathExists",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "275431871608720134524001847305554475878",
"length": 121.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-a8260919"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce",
"target": {
"function": "testInternalSecondaryDexPath",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "58099342107126568692779602153918628768",
"length": 523.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-b0e8a927"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce",
"target": {
"function": "setUp",
"file": "libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"
},
"deprecated": false,
"digest": {
"function_hash": "52133324725993206972741707811420643109",
"length": 2361.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-b8d6a5ab"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce",
"target": {
"function": "addSecondaryDexUse",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "53896047260472789398832835734470911558",
"length": 1081.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-dabc070e"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17",
"target": {
"function": "validateInputs",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "55088197183146368341936146436632707724",
"length": 494.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-e1be841d"
},
{
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/art/+/a6c55d59cee838e4dc62b92b9e931a29a37140b9",
"target": {
"function": "pathExists",
"file": "libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"
},
"deprecated": false,
"digest": {
"function_hash": "299553353509159869573557185011998636106",
"length": 81.0
},
"signature_type": "Function",
"id": "ASB-A-391895923-f9e34447"
}
],
"types": [
"DoS"
]
}