ASB-A-393377017

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-393377017.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-393377017
Aliases
  • A-393377017
  • CVE-2026-45518
Published
2026-09-01T00:00:00Z
Modified
2026-09-08T15:39:03Z
Summary
[none]
Details

In tokenize of SQLiteTokenizer.java, there is a possible way to access voicemail information due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/f80be5110a5652541944503569c9e5d69a867c43"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "153784735616314876731575570561778006752",
                    "165497316540787002850253994455318663636",
                    "65272834540567597956054705555019129097",
                    "133317393351399502637679081818898470716",
                    "9857011799569951296131813641189172459",
                    "234953442205076443758477543161934774704",
                    "141859345172514857745696617396251468678",
                    "229960698054558102951368751876021843265",
                    "226044011937549434113389731604909243042",
                    "123756223541325786265815315492606977141",
                    "103610189508907005209700640224884701420",
                    "93513062602300379611765519927208853120",
                    "201878102184231961349851951728532990049",
                    "123623761493041475997453604921648716877",
                    "185787513711978350003237692354900532964",
                    "300982566470591856149138538601357340544",
                    "225932435274606152255622657395089254953",
                    "118380802083982032032300605035372134890",
                    "166573268600512131192532193821490142382",
                    "248901343624810178119272361313791447127",
                    "9605950192759820393552707793498613965",
                    "192344061103739299691095037540379431254",
                    "180856812992411156046493478863902891386",
                    "253320092251116809147104257347885273288",
                    "163895032787535680487946520012147948296",
                    "84365735271449949657783076644773026589",
                    "313835351229872290539091480337300385559",
                    "145750369608503459122597594663261936331",
                    "60137977177721827013471016529463990364",
                    "259343207104689714997401157639984919933",
                    "298475588439797613578363806973380941942",
                    "49638204986387215247792232283307708788",
                    "140060792527752372743085139786531829985"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-73fe8443",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/f80be5110a5652541944503569c9e5d69a867c43",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "140211685814864986480987126880747771744",
                "length": 2027
            },
            "id": "ASB-A-393377017-adddba8c",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/f80be5110a5652541944503569c9e5d69a867c43",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java",
                "function": "tokenize"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"
platform/packages/providers/ContactsProvider

Package

Name
platform/packages/providers/ContactsProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/d7a97812d4b58d033b81d8d2ebcb24d1f8a5edd8"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "140288039455821218086640910183906661960",
                    "211254183900400793275660875871700391248",
                    "136651515077597415548475443070400879625",
                    "8497854931053958437765743708896347021",
                    "233790742014947824748732515562303380583"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-12768d1e",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/d7a97812d4b58d033b81d8d2ebcb24d1f8a5edd8",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "661118511615777226251239767139121127",
                "length": 129
            },
            "id": "ASB-A-393377017-a7084a9d",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/d7a97812d4b58d033b81d8d2ebcb24d1f8a5edd8",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java",
                "function": "addClause"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-09-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/21c111b80e85579a7440fa8844c2fefd03d65356"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "140211685814864986480987126880747771744",
                "length": 2027
            },
            "id": "ASB-A-393377017-301ac5e2",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/21c111b80e85579a7440fa8844c2fefd03d65356",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java",
                "function": "tokenize"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "153784735616314876731575570561778006752",
                    "165497316540787002850253994455318663636",
                    "65272834540567597956054705555019129097",
                    "133317393351399502637679081818898470716",
                    "9857011799569951296131813641189172459",
                    "234953442205076443758477543161934774704",
                    "141859345172514857745696617396251468678",
                    "229960698054558102951368751876021843265",
                    "226044011937549434113389731604909243042",
                    "123756223541325786265815315492606977141",
                    "103610189508907005209700640224884701420",
                    "93513062602300379611765519927208853120",
                    "201878102184231961349851951728532990049",
                    "123623761493041475997453604921648716877",
                    "185787513711978350003237692354900532964",
                    "300982566470591856149138538601357340544",
                    "225932435274606152255622657395089254953",
                    "118380802083982032032300605035372134890",
                    "166573268600512131192532193821490142382",
                    "248901343624810178119272361313791447127",
                    "9605950192759820393552707793498613965",
                    "192344061103739299691095037540379431254",
                    "180856812992411156046493478863902891386",
                    "253320092251116809147104257347885273288",
                    "163895032787535680487946520012147948296",
                    "84365735271449949657783076644773026589",
                    "313835351229872290539091480337300385559",
                    "145750369608503459122597594663261936331",
                    "60137977177721827013471016529463990364",
                    "259343207104689714997401157639984919933",
                    "298475588439797613578363806973380941942",
                    "49638204986387215247792232283307708788",
                    "140060792527752372743085139786531829985"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-717bc8da",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/21c111b80e85579a7440fa8844c2fefd03d65356",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"
platform/packages/providers/ContactsProvider

Package

Name
platform/packages/providers/ContactsProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-09-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6841061e00676cca497b77e4ed426af16759088e"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "140288039455821218086640910183906661960",
                    "211254183900400793275660875871700391248",
                    "136651515077597415548475443070400879625",
                    "8497854931053958437765743708896347021",
                    "233790742014947824748732515562303380583"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-7a74ef5c",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6841061e00676cca497b77e4ed426af16759088e",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "661118511615777226251239767139121127",
                "length": 129
            },
            "id": "ASB-A-393377017-b158a8dd",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6841061e00676cca497b77e4ed426af16759088e",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java",
                "function": "addClause"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/e1c7c16d755b15db1a32fd8f979f569cc69fdfe1"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "140211685814864986480987126880747771744",
                "length": 2027
            },
            "id": "ASB-A-393377017-4f596428",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e1c7c16d755b15db1a32fd8f979f569cc69fdfe1",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java",
                "function": "tokenize"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "153784735616314876731575570561778006752",
                    "165497316540787002850253994455318663636",
                    "65272834540567597956054705555019129097",
                    "133317393351399502637679081818898470716",
                    "9857011799569951296131813641189172459",
                    "234953442205076443758477543161934774704",
                    "141859345172514857745696617396251468678",
                    "229960698054558102951368751876021843265",
                    "226044011937549434113389731604909243042",
                    "123756223541325786265815315492606977141",
                    "103610189508907005209700640224884701420",
                    "93513062602300379611765519927208853120",
                    "201878102184231961349851951728532990049",
                    "123623761493041475997453604921648716877",
                    "185787513711978350003237692354900532964",
                    "300982566470591856149138538601357340544",
                    "225932435274606152255622657395089254953",
                    "118380802083982032032300605035372134890",
                    "166573268600512131192532193821490142382",
                    "248901343624810178119272361313791447127",
                    "9605950192759820393552707793498613965",
                    "192344061103739299691095037540379431254",
                    "180856812992411156046493478863902891386",
                    "253320092251116809147104257347885273288",
                    "163895032787535680487946520012147948296",
                    "84365735271449949657783076644773026589",
                    "313835351229872290539091480337300385559",
                    "145750369608503459122597594663261936331",
                    "60137977177721827013471016529463990364",
                    "259343207104689714997401157639984919933",
                    "298475588439797613578363806973380941942",
                    "49638204986387215247792232283307708788",
                    "140060792527752372743085139786531829985"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-6c99c60a",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e1c7c16d755b15db1a32fd8f979f569cc69fdfe1",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"
platform/packages/providers/ContactsProvider

Package

Name
platform/packages/providers/ContactsProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/dc78fd3a7bcf06627dc84446cf5fb1004dcbd660"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "140288039455821218086640910183906661960",
                    "211254183900400793275660875871700391248",
                    "136651515077597415548475443070400879625",
                    "8497854931053958437765743708896347021",
                    "233790742014947824748732515562303380583"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-554b31ea",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/dc78fd3a7bcf06627dc84446cf5fb1004dcbd660",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "661118511615777226251239767139121127",
                "length": 129
            },
            "id": "ASB-A-393377017-c34773eb",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/dc78fd3a7bcf06627dc84446cf5fb1004dcbd660",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java",
                "function": "addClause"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/94147cf4e83645e9df08255f2719b3a7e8a46ace"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "140211685814864986480987126880747771744",
                "length": 2027
            },
            "id": "ASB-A-393377017-88e0d2da",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/94147cf4e83645e9df08255f2719b3a7e8a46ace",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java",
                "function": "tokenize"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "153784735616314876731575570561778006752",
                    "165497316540787002850253994455318663636",
                    "65272834540567597956054705555019129097",
                    "133317393351399502637679081818898470716",
                    "9857011799569951296131813641189172459",
                    "234953442205076443758477543161934774704",
                    "141859345172514857745696617396251468678",
                    "229960698054558102951368751876021843265",
                    "226044011937549434113389731604909243042",
                    "123756223541325786265815315492606977141",
                    "103610189508907005209700640224884701420",
                    "93513062602300379611765519927208853120",
                    "201878102184231961349851951728532990049",
                    "123623761493041475997453604921648716877",
                    "185787513711978350003237692354900532964",
                    "300982566470591856149138538601357340544",
                    "225932435274606152255622657395089254953",
                    "118380802083982032032300605035372134890",
                    "166573268600512131192532193821490142382",
                    "248901343624810178119272361313791447127",
                    "9605950192759820393552707793498613965",
                    "192344061103739299691095037540379431254",
                    "180856812992411156046493478863902891386",
                    "253320092251116809147104257347885273288",
                    "163895032787535680487946520012147948296",
                    "84365735271449949657783076644773026589",
                    "313835351229872290539091480337300385559",
                    "145750369608503459122597594663261936331",
                    "60137977177721827013471016529463990364",
                    "259343207104689714997401157639984919933",
                    "298475588439797613578363806973380941942",
                    "49638204986387215247792232283307708788",
                    "140060792527752372743085139786531829985"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-8a355354",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/94147cf4e83645e9df08255f2719b3a7e8a46ace",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"
platform/packages/providers/ContactsProvider

Package

Name
platform/packages/providers/ContactsProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/5c76d99926c953fa222a79fae9ded34052a7982a"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "661118511615777226251239767139121127",
                "length": 129
            },
            "id": "ASB-A-393377017-976db1c8",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/5c76d99926c953fa222a79fae9ded34052a7982a",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java",
                "function": "addClause"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "140288039455821218086640910183906661960",
                    "211254183900400793275660875871700391248",
                    "136651515077597415548475443070400879625",
                    "8497854931053958437765743708896347021",
                    "233790742014947824748732515562303380583"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-af5e4316",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/5c76d99926c953fa222a79fae9ded34052a7982a",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/07a576269b3c322f1dbda670ef4b811305b74863"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "140211685814864986480987126880747771744",
                "length": 2027
            },
            "id": "ASB-A-393377017-1af0e908",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/07a576269b3c322f1dbda670ef4b811305b74863",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java",
                "function": "tokenize"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "153784735616314876731575570561778006752",
                    "165497316540787002850253994455318663636",
                    "65272834540567597956054705555019129097",
                    "133317393351399502637679081818898470716",
                    "9857011799569951296131813641189172459",
                    "234953442205076443758477543161934774704",
                    "141859345172514857745696617396251468678",
                    "229960698054558102951368751876021843265",
                    "226044011937549434113389731604909243042",
                    "123756223541325786265815315492606977141",
                    "103610189508907005209700640224884701420",
                    "93513062602300379611765519927208853120",
                    "201878102184231961349851951728532990049",
                    "123623761493041475997453604921648716877",
                    "185787513711978350003237692354900532964",
                    "300982566470591856149138538601357340544",
                    "225932435274606152255622657395089254953",
                    "118380802083982032032300605035372134890",
                    "166573268600512131192532193821490142382",
                    "248901343624810178119272361313791447127",
                    "9605950192759820393552707793498613965",
                    "192344061103739299691095037540379431254",
                    "180856812992411156046493478863902891386",
                    "253320092251116809147104257347885273288",
                    "163895032787535680487946520012147948296",
                    "84365735271449949657783076644773026589",
                    "313835351229872290539091480337300385559",
                    "145750369608503459122597594663261936331",
                    "60137977177721827013471016529463990364",
                    "259343207104689714997401157639984919933",
                    "298475588439797613578363806973380941942",
                    "49638204986387215247792232283307708788",
                    "140060792527752372743085139786531829985"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-966a75b7",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/07a576269b3c322f1dbda670ef4b811305b74863",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"
platform/packages/providers/ContactsProvider

Package

Name
platform/packages/providers/ContactsProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6d6d6d6627cc5fc3fc42fc5fafe95d474df1c15f"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "140288039455821218086640910183906661960",
                    "211254183900400793275660875871700391248",
                    "136651515077597415548475443070400879625",
                    "8497854931053958437765743708896347021",
                    "233790742014947824748732515562303380583"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-a1f3ed0c",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6d6d6d6627cc5fc3fc42fc5fafe95d474df1c15f",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "661118511615777226251239767139121127",
                "length": 129
            },
            "id": "ASB-A-393377017-f68000f4",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/6d6d6d6627cc5fc3fc42fc5fafe95d474df1c15f",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java",
                "function": "addClause"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-09-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/feec6cff3dff314aa6ee0adbc1751c89eb6ee2cc"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "140211685814864986480987126880747771744",
                "length": 2027
            },
            "id": "ASB-A-393377017-212b26cc",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/feec6cff3dff314aa6ee0adbc1751c89eb6ee2cc",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java",
                "function": "tokenize"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "153784735616314876731575570561778006752",
                    "165497316540787002850253994455318663636",
                    "65272834540567597956054705555019129097",
                    "133317393351399502637679081818898470716",
                    "9857011799569951296131813641189172459",
                    "234953442205076443758477543161934774704",
                    "141859345172514857745696617396251468678",
                    "229960698054558102951368751876021843265",
                    "226044011937549434113389731604909243042",
                    "123756223541325786265815315492606977141",
                    "103610189508907005209700640224884701420",
                    "93513062602300379611765519927208853120",
                    "201878102184231961349851951728532990049",
                    "123623761493041475997453604921648716877",
                    "185787513711978350003237692354900532964",
                    "300982566470591856149138538601357340544",
                    "225932435274606152255622657395089254953",
                    "118380802083982032032300605035372134890",
                    "166573268600512131192532193821490142382",
                    "248901343624810178119272361313791447127",
                    "9605950192759820393552707793498613965",
                    "192344061103739299691095037540379431254",
                    "180856812992411156046493478863902891386",
                    "253320092251116809147104257347885273288",
                    "163895032787535680487946520012147948296",
                    "84365735271449949657783076644773026589",
                    "313835351229872290539091480337300385559",
                    "145750369608503459122597594663261936331",
                    "60137977177721827013471016529463990364",
                    "259343207104689714997401157639984919933",
                    "298475588439797613578363806973380941942",
                    "49638204986387215247792232283307708788",
                    "140060792527752372743085139786531829985"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-d4b78c2a",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/feec6cff3dff314aa6ee0adbc1751c89eb6ee2cc",
            "target": {
                "file": "core/java/android/database/sqlite/SQLiteTokenizer.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"
platform/packages/providers/ContactsProvider

Package

Name
platform/packages/providers/ContactsProvider

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-09-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/208d08b262f1181989a202313a4fcde44504f870"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "140288039455821218086640910183906661960",
                    "211254183900400793275660875871700391248",
                    "136651515077597415548475443070400879625",
                    "8497854931053958437765743708896347021",
                    "233790742014947824748732515562303380583"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-393377017-105127f1",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/208d08b262f1181989a202313a4fcde44504f870",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "661118511615777226251239767139121127",
                "length": 129
            },
            "id": "ASB-A-393377017-ef18f4ba",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/providers/ContactsProvider/+/208d08b262f1181989a202313a4fcde44504f870",
            "target": {
                "file": "src/com/android/providers/contacts/util/SelectionBuilder.java",
                "function": "addClause"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-393377017.json"