ASB-A-416259832

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-416259832.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-416259832
Aliases
  • A-416259832
  • CVE-2025-48603
Published
2025-12-01T00:00:00Z
Modified
2025-12-12T17:16:28.782020Z
Summary
[none]
Details

In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2-next:0
Fixed
16-qpr2-next:2025-12-01

Affected versions

Other

16-qpr2-next

Ecosystem specific 

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "312775793928733375048403279979899896709",
                    "320516439701229709620610102836578327916",
                    "24943489758215494939458249242976086800",
                    "225579985887653641479618923416191264617",
                    "302126789327002282224664998017469985454",
                    "330606813865672487230694839134060801879",
                    "280458708223532231840046614001678081455",
                    "91669783225971474884237707944169528469",
                    "35797891605720894951246669560834080609",
                    "203806384724473649681571720224085836205",
                    "167239798223898691065626160679430491574",
                    "283564095416796908385708385779120705158",
                    "322779700565649224970003520730233128842",
                    "168583688539381858254418563131668962155",
                    "306763741114392225018152507924516647742",
                    "255571796439040682883146532505589069626",
                    "187074443976747679220687355281211363395",
                    "294838234241834513287600405004757900301",
                    "284832347438650248446724679920342558725",
                    "339596659654306373097428442182164030389",
                    "189704945377289551719637592938076131669",
                    "11257697894793854799160152638029231186",
                    "313650761420819531709047905775899963996",
                    "74176445016353105248038706302593673655"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/5e31d9c067f0ef88848dfc16aff66fabc53bd638",
            "id": "ASB-A-416259832-aa60c057",
            "signature_type": "Line",
            "target": {
                "file": "core/java/android/view/inputmethod/InputMethodInfo.java"
            },
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "digest": {
                "function_hash": "28356626192793094800501630674322785970",
                "length": 6315.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/5e31d9c067f0ef88848dfc16aff66fabc53bd638",
            "id": "ASB-A-416259832-f87171ba",
            "signature_type": "Function",
            "target": {
                "file": "core/java/android/view/inputmethod/InputMethodInfo.java",
                "function": "InputMethodInfo"
            },
            "signature_version": "v1",
            "deprecated": false
        }
    ],
    "types": [
        "DoS"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/5e31d9c067f0ef88848dfc16aff66fabc53bd638"
    ],
    "severity": "High"
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2025-12-01

Affected versions

Other

15

Ecosystem specific 

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "312775793928733375048403279979899896709",
                    "320516439701229709620610102836578327916",
                    "24943489758215494939458249242976086800",
                    "225579985887653641479618923416191264617",
                    "302126789327002282224664998017469985454",
                    "330606813865672487230694839134060801879",
                    "280458708223532231840046614001678081455",
                    "91669783225971474884237707944169528469",
                    "35797891605720894951246669560834080609",
                    "203806384724473649681571720224085836205",
                    "167239798223898691065626160679430491574",
                    "283564095416796908385708385779120705158",
                    "322779700565649224970003520730233128842",
                    "168583688539381858254418563131668962155",
                    "306763741114392225018152507924516647742",
                    "255571796439040682883146532505589069626",
                    "187074443976747679220687355281211363395",
                    "294838234241834513287600405004757900301",
                    "284832347438650248446724679920342558725",
                    "339596659654306373097428442182164030389",
                    "189704945377289551719637592938076131669",
                    "11257697894793854799160152638029231186",
                    "313650761420819531709047905775899963996",
                    "74176445016353105248038706302593673655"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/b417c7c9102e5510da35dbfc771eab3fe1dc670d",
            "id": "ASB-A-416259832-3939340c",
            "signature_type": "Line",
            "target": {
                "file": "core/java/android/view/inputmethod/InputMethodInfo.java"
            },
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "digest": {
                "function_hash": "28356626192793094800501630674322785970",
                "length": 6315.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/b417c7c9102e5510da35dbfc771eab3fe1dc670d",
            "id": "ASB-A-416259832-c4010c5e",
            "signature_type": "Function",
            "target": {
                "file": "core/java/android/view/inputmethod/InputMethodInfo.java",
                "function": "InputMethodInfo"
            },
            "signature_version": "v1",
            "deprecated": false
        }
    ],
    "types": [
        "DoS"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/b417c7c9102e5510da35dbfc771eab3fe1dc670d"
    ],
    "severity": "High"
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2025-12-01

Affected versions

Other

16

Ecosystem specific 

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "312775793928733375048403279979899896709",
                    "320516439701229709620610102836578327916",
                    "24943489758215494939458249242976086800",
                    "225579985887653641479618923416191264617",
                    "302126789327002282224664998017469985454",
                    "330606813865672487230694839134060801879",
                    "280458708223532231840046614001678081455",
                    "91669783225971474884237707944169528469",
                    "35797891605720894951246669560834080609",
                    "203806384724473649681571720224085836205",
                    "167239798223898691065626160679430491574",
                    "283564095416796908385708385779120705158",
                    "322779700565649224970003520730233128842",
                    "168583688539381858254418563131668962155",
                    "306763741114392225018152507924516647742",
                    "255571796439040682883146532505589069626",
                    "187074443976747679220687355281211363395",
                    "294838234241834513287600405004757900301",
                    "284832347438650248446724679920342558725",
                    "339596659654306373097428442182164030389",
                    "189704945377289551719637592938076131669",
                    "11257697894793854799160152638029231186",
                    "313650761420819531709047905775899963996",
                    "74176445016353105248038706302593673655"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c5640ed624f4e5388bd25b7910474d4eebfdfc2a",
            "id": "ASB-A-416259832-ec8f178f",
            "signature_type": "Line",
            "target": {
                "file": "core/java/android/view/inputmethod/InputMethodInfo.java"
            },
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "digest": {
                "function_hash": "28356626192793094800501630674322785970",
                "length": 6315.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c5640ed624f4e5388bd25b7910474d4eebfdfc2a",
            "id": "ASB-A-416259832-f961987c",
            "signature_type": "Function",
            "target": {
                "file": "core/java/android/view/inputmethod/InputMethodInfo.java",
                "function": "InputMethodInfo"
            },
            "signature_version": "v1",
            "deprecated": false
        }
    ],
    "types": [
        "DoS"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/c5640ed624f4e5388bd25b7910474d4eebfdfc2a"
    ],
    "severity": "High"
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2025-12-01

Affected versions

Other

13

Ecosystem specific 

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "digest": {
                "function_hash": "84701541600284753292829922089629855862",
                "length": 4977.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9b3d15b327bc579f68fed2abf42332d2109a36b9",
            "id": "ASB-A-416259832-36db5192",
            "signature_type": "Function",
            "target": {
                "file": "core/java/android/view/inputmethod/InputMethodInfo.java",
                "function": "InputMethodInfo"
            },
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "224368646116529125510308914497862445851",
                    "182632555549413327304340748554840449209",
                    "36823171062785144686004458995036615294",
                    "199478206947803978089377739612196812312",
                    "302126789327002282224664998017469985454",
                    "330606813865672487230694839134060801879",
                    "123507770211255993651813289831972339760",
                    "297200061576079952970853024181584376006",
                    "204175817182894702582920483800463691848",
                    "126682899244027050039981385379860268699",
                    "74096199367053915691735868889316057000",
                    "283564095416796908385708385779120705158",
                    "322779700565649224970003520730233128842",
                    "168583688539381858254418563131668962155",
                    "306763741114392225018152507924516647742",
                    "255571796439040682883146532505589069626",
                    "187074443976747679220687355281211363395",
                    "294838234241834513287600405004757900301",
                    "284832347438650248446724679920342558725",
                    "339596659654306373097428442182164030389",
                    "189704945377289551719637592938076131669",
                    "149237808642807534634578169088551616933",
                    "205286730261416736360518831494767686654",
                    "76522177718807367695449626168015599677"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/9b3d15b327bc579f68fed2abf42332d2109a36b9",
            "id": "ASB-A-416259832-b7164032",
            "signature_type": "Line",
            "target": {
                "file": "core/java/android/view/inputmethod/InputMethodInfo.java"
            },
            "signature_version": "v1",
            "deprecated": false
        }
    ],
    "types": [
        "DoS"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/9b3d15b327bc579f68fed2abf42332d2109a36b9"
    ],
    "severity": "High"
}

platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2025-12-01

Affected versions

Other

14

Ecosystem specific 

{
    "spl": "2025-12-01",
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "312775793928733375048403279979899896709",
                    "320516439701229709620610102836578327916",
                    "24943489758215494939458249242976086800",
                    "225579985887653641479618923416191264617",
                    "302126789327002282224664998017469985454",
                    "330606813865672487230694839134060801879",
                    "123507770211255993651813289831972339760",
                    "297200061576079952970853024181584376006",
                    "35797891605720894951246669560834080609",
                    "203806384724473649681571720224085836205",
                    "74096199367053915691735868889316057000",
                    "283564095416796908385708385779120705158",
                    "322779700565649224970003520730233128842",
                    "168583688539381858254418563131668962155",
                    "306763741114392225018152507924516647742",
                    "255571796439040682883146532505589069626",
                    "187074443976747679220687355281211363395",
                    "294838234241834513287600405004757900301",
                    "284832347438650248446724679920342558725",
                    "339596659654306373097428442182164030389",
                    "189704945377289551719637592938076131669",
                    "85193412839537088904486511867596481361",
                    "179033180906823720092900513519100873115",
                    "254632921853906159389682386119083561031"
                ]
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/33e0101c0b920886afb0c94d5a8166bd3c0ad05a",
            "id": "ASB-A-416259832-b4a0c8de",
            "signature_type": "Line",
            "target": {
                "file": "core/java/android/view/inputmethod/InputMethodInfo.java"
            },
            "signature_version": "v1",
            "deprecated": false
        },
        {
            "digest": {
                "function_hash": "242742550785476793746439189871526631815",
                "length": 5732.0
            },
            "source": "https://android.googlesource.com/platform/frameworks/base/+/33e0101c0b920886afb0c94d5a8166bd3c0ad05a",
            "id": "ASB-A-416259832-c321535e",
            "signature_type": "Function",
            "target": {
                "file": "core/java/android/view/inputmethod/InputMethodInfo.java",
                "function": "InputMethodInfo"
            },
            "signature_version": "v1",
            "deprecated": false
        }
    ],
    "types": [
        "DoS"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/33e0101c0b920886afb0c94d5a8166bd3c0ad05a"
    ],
    "severity": "High"
}