In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a"
],
"severity": "High",
"types": [
"RCE"
],
"vanir_signatures": [
{
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "process_service_attr_rsp"
},
"id": "ASB-A-447536200-05898a51",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2673.0,
"function_hash": "228124477976245695124745732923622025023"
},
"signature_version": "v1"
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_is_base_uuid"
},
"id": "ASB-A-447536200-1cdbb47c",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 185.0,
"function_hash": "333724087067145912869271161799429386418"
},
"signature_version": "v1"
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-20649856",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_clear_all_ccbs_for_cid"
},
"digest": {
"length": 341.0,
"function_hash": "81482547451265556306424903678459766129"
}
},
{
"digest": {
"length": 682.0,
"function_hash": "65679401819610885128879197593996558186"
},
"id": "ASB-A-447536200-2468246e",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_build_attrib_seq"
}
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_get_attrib_seq_len"
},
"id": "ASB-A-447536200-3298115a",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 521.0,
"function_hash": "150730886917213782520724660801541534010"
},
"signature_version": "v1"
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-3a246f1b",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_process_pend_ccb_same_cid"
},
"digest": {
"length": 429.0,
"function_hash": "1006278776863331260199144266564773463"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-4002adf9",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_process_pend_ccb_new_cid"
},
"digest": {
"length": 740.0,
"function_hash": "78343784564162593110955058439191107236"
}
},
{
"digest": {
"length": 1496.0,
"function_hash": "319676069720130263146922114782178272468"
},
"id": "ASB-A-447536200-47d64fbf",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "sdp_snd_service_search_req"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-517de2f7",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_get_active_ccb_cid"
},
"digest": {
"length": 465.0,
"function_hash": "279338205253987393261141600593878522533"
}
},
{
"digest": {
"length": 3642.0,
"function_hash": "200039696306405254345323423075009536239"
},
"id": "ASB-A-447536200-57755f41",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "process_service_search_attr_rsp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"326370735855782173290088333519199024501",
"23775190123876185367952224390436993630",
"214008033334314886152430659070161006070",
"19158865299871508974583687411596965783",
"108404385497647739189959524256453112757",
"304463337081961149951185785977887023747",
"90154277084635067974258224429291730575",
"274969701243507201424821078372926604986",
"278365189175265788358718205491501046780",
"231084207802152130568933406874529808348",
"221859579320574027536831881722138168489",
"144313513534590638134725235298719246491",
"32543603161677176855104810085841475209",
"26754928882030398912622750934244099367",
"157294517388950836013497118318277650405",
"48185019849494187661612053535622932786",
"167521774277652692342849343101078533110",
"276756990864081341744246601161355618197",
"74273699812742365430141261706142631460",
"34647836671808944544916338826853468026",
"334324837258436036672063254752341890796",
"46307960329306334866436444378705138076",
"179749108502613592247648680954611298347",
"236251186616068309474544052909372766471",
"119246952202329294236808126097919144893",
"139224628970119815935533933945979508547",
"91013505136131953619925512187470977113",
"49883370931429588927880830416878931236",
"70877147429192502848043836931041021146",
"306998342490107075672154028662122706074",
"252601170005359041027288205100501752322",
"67078385489255641139962012911637787104",
"52529972395341481296516571846908603738",
"154229003422302414995266222010052262995",
"306269228552719857307932085848829441729",
"185185180429629931402327951989947970450",
"304360568698892400282016347847436309157",
"112132681103412679542392778145806142316",
"168361769482275271245464666724613642538",
"212811995986721383140016008002199073860",
"309311720268083120908592299428973346565",
"316560629611697645921225785457231240235",
"233257058859039914057226832547395699501",
"12599416583967498031884446909047241290",
"21756245403317452600140451063624359492",
"32288059406285717573537828019028935314",
"311448689938422014763309863834569663926",
"193930503312197903953190909580389544862",
"306269228552719857307932085848829441729",
"185185180429629931402327951989947970450",
"99199587304693493220773868781022884981",
"12064174143542204562024668115732699549",
"313187825757134591379171286585886808814",
"327215228318906691143183335563639566379",
"79272656834164451933794474062533160745",
"178544324326528763576308132597231427274",
"256935188940384320821465600702650672030",
"326631676306538573570444043739411462570",
"137425355368622959117415691134457687761",
"264189053794117285838469680204300536083",
"154577415408098892618715483155904229563",
"102816232909661194573612923711765279610",
"217559866803613539181936902618958470861",
"201231236171259407064836701161991166312",
"108631665475905534738327248248822642075",
"51445223963378330972303350929557905991",
"199453958352446924736154211746824617573",
"82968710789178680278744926141136139424",
"108712289331515478568327924746544825520",
"89376339245645909852432352248151532356",
"169672469906830227547459443234812288195",
"197657977485633135660875508687874485253",
"187450595241006105693429992055939501030",
"259763838707751556659522844238805527769",
"225298182088182573997019063648279313760",
"141751588404925206638793119708321271300",
"16354430546490706990457278431273215788",
"38433798499403747781527309899318996623",
"178895073226500160457343647740838484659",
"90349375008200988480856512099154006686",
"194646932120628440495656481768784140803",
"246326683515591731197641092874218477180",
"155872781830939399377585313960684436835",
"312480222250217645006778648212679949130",
"314543507040991882890378359474810089450",
"235948113649741128556398669173371333425",
"164483634386077128027241956451505197708",
"183189645098710955767238707651902810425",
"50478338057853078796698474751733576499"
]
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"id": "ASB-A-447536200-6dbd3e08",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc"
}
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_find_ccb_by_cid"
},
"id": "ASB-A-447536200-706f9020",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 336.0,
"function_hash": "80754606558893926492832094027308066581"
},
"signature_version": "v1"
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-75c38d74",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_dump_all_ccb"
},
"digest": {
"length": 324.0,
"function_hash": "214643982189623892415196064866639173907"
}
},
{
"digest": {
"length": 420.0,
"function_hash": "80933393125222945169276068956322292293"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"id": "ASB-A-447536200-96dad96a",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_clear_pend_ccb"
}
},
{
"digest": {
"length": 300.0,
"function_hash": "111669523368200778989000892464108701398"
},
"id": "ASB-A-447536200-cc255ba8",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_find_ccb_by_db"
}
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_allocate_ccb"
},
"id": "ASB-A-447536200-e20e0857",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "54787946774131276834997011142070032338"
},
"signature_version": "v1"
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-ef1f0a28",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdpint.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"171078056534141121881746231170084347661",
"170947527587775249395543101524768367324",
"258573597564683953108495265542610645476",
"328736490807440130119498483174093372464"
]
}
},
{
"target": {
"file": "system/stack/sdp/sdp_discovery.cc"
},
"id": "ASB-A-447536200-fca56305",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"245274500916817765685026299223726931501",
"261107640071343295284311259762648782367",
"280871192533331872490680348279995469507",
"159758736012175431084880502847943668461",
"312665254395866983748225937565226607594",
"155553672837112500187961424711653847152",
"183658112776456884982317791669428260512",
"245274500916817765685026299223726931501",
"239216014942955512543650145673427277677",
"37095494119066417819874032828651970831",
"193361253108039010474392589263493625407",
"131547622748974736285629891326986368741",
"143033073766739784571993086891917467312",
"284770161684915356956004941730926158323",
"305616741311290478236511749051214208940",
"76985485075227398684660142720497034879",
"65954147434926373067775428596254591438",
"51778380885260079002472106207060386654",
"298845928710937452972966093599563997059",
"287725367748858497641260553031501012666",
"276576309933893761289846244921743107883",
"152922577545610054467656687284007472864",
"304295685645017222468866694584391935067",
"32260036647202101542321266565207101459",
"195062101594314683239219202772270039101",
"280650560292466829771637302790996489161",
"291243410863650913579494073112024021213",
"305616741311290478236511749051214208940",
"76985485075227398684660142720497034879",
"65954147434926373067775428596254591438",
"60835984753162607771912530381849305263",
"202071630383348982842554994678484635834"
]
},
"signature_version": "v1"
}
],
"spl": "2026-06-01"
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535"
],
"severity": "High",
"types": [
"RCE"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"signature_version": "v1",
"id": "ASB-A-447536200-2e699930",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_clear_pend_ccb"
},
"digest": {
"length": 372.0,
"function_hash": "316212770131371436286519623397336237357"
}
},
{
"digest": {
"length": 625.0,
"function_hash": "265068443550774229780860342413028575553"
},
"id": "ASB-A-447536200-3b23362a",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_process_pend_ccb_new_cid"
}
},
{
"target": {
"file": "system/stack/sdp/sdp_discovery.cc"
},
"id": "ASB-A-447536200-580234d4",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"183658112776456884982317791669428260512",
"245274500916817765685026299223726931501",
"261107640071343295284311259762648782367",
"107432523268821900211035860330276751102",
"159758736012175431084880502847943668461",
"312665254395866983748225937565226607594",
"183658112776456884982317791669428260512",
"245274500916817765685026299223726931501",
"239216014942955512543650145673427277677",
"171190651436066523382397299537867725127",
"193361253108039010474392589263493625407",
"44259014220124156151158169539784005727",
"83615662073872901412605072790669479592",
"332603156978438045215459941919583329411",
"390938992300505522195875478186405772",
"209092327733482572776398202651444387212",
"1007792411899903657847015103372108454",
"215784879440283593456859045336608473736",
"265917009288791384330916886080142152618",
"287725367748858497641260553031501012666",
"276576309933893761289846244921743107883",
"152922577545610054467656687284007472864",
"304295685645017222468866694584391935067",
"32260036647202101542321266565207101459",
"195062101594314683239219202772270039101",
"140943815529429886940162158830286155510",
"332603156978438045215459941919583329411",
"390938992300505522195875478186405772",
"209092327733482572776398202651444387212",
"240050482495480845480262458032094524268",
"68314242089519690823758425391443762558",
"314957757806087263563056318967461454051"
]
},
"signature_version": "v1"
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-5bfebd1a",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdpint.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"245975806998326282897736415136276715524",
"227635983820497233123737089326974992700",
"333298292523052068529268180816754694612",
"136551380523486633017351997876088482372"
]
}
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_is_base_uuid"
},
"id": "ASB-A-447536200-7a305ba3",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 185.0,
"function_hash": "208546097822161473594154319925646749696"
},
"signature_version": "v1"
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc"
},
"id": "ASB-A-447536200-7b2d3900",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"326370735855782173290088333519199024501",
"168484737811878346476233804207844102802",
"209855550805138250423092381834766273225",
"270635274930716844049003356273687678094",
"35436834977655841040790079453909089138",
"220760902501378382155048574824173680689",
"115514079460509737281765431370265493595",
"264567184784687710178383146007433450256",
"187612247867437204207291813035662472450",
"244534874859023549461483857930705054685",
"236860252472128135954545952216777379271",
"314347501146288078239009769938107745555",
"335635115093336676414886775784852034944",
"305409964575734714147609171868653136022",
"216753756236515197432872685449490267809",
"72923339473680657477029268661882284535",
"12388186395672872938962820315297379170",
"294325273084886363883312843215450402740",
"27877949440982926145266306272050375863",
"306236976359628743469644493118247518520",
"114552253490572829054692528441112407866",
"324150545003371972269092317629291655842",
"82940527776583746352715246972010390065",
"188939913193119186317185389500148929266",
"299980396087160819537571327673927603649",
"248540149873802503755277051623794251175",
"199807422108682321122217058621257728022",
"11625168764582711805871222798910270171",
"230224199089253317929709415374938866428",
"311804297712642271149551374327002463786",
"136322865108038674428021675166742603321",
"217004413781050003220444925721375424194",
"99907716076257563476849358806210622176",
"157066826348609771402794977173593848574",
"162937564018798944678715653955007552850",
"328947380536869477407505614412193768967",
"215089919965880416929432952714073707934",
"245720050566093072363892831534780966362",
"136322865108038674428021675166742603321",
"243025138387903154865409534615720559931",
"193515975318773987868370188795133729651",
"129606122677402709963051695211538735221",
"230224199089253317929709415374938866428",
"311804297712642271149551374327002463786",
"136322865108038674428021675166742603321",
"178471867417679587374181406900292538190",
"78240578126920771397608582533241210579",
"10021676309050580608348405789842091724",
"97340881592337826414141165792030715775",
"316541200221134718438491709068700218407",
"152820968930503425259694623337199103001",
"6183317276182603485105702155572644745",
"47583654619010511337980586558146490640",
"67028234233707455533253824454951475441",
"287659366736639719616329542557909764796",
"75227255106732586204217689819467596758",
"68708104641908612620073674231858830650",
"121739399516288288285404311758313045303",
"176667335615767700481509840876035817237",
"139384029423412105122811606899191639880",
"295976341110895970466300820547144591938",
"187450595241006105693429992055939501030",
"259763838707751556659522844238805527769",
"225298182088182573997019063648279313760",
"141751588404925206638793119708321271300",
"16354430546490706990457278431273215788",
"117367199946443104980179049542708737775",
"103430217550062819751943427571824005012",
"113306698009149581613564880102064838492",
"172711697904102539492773343677023438809",
"290609846976860001417399293487738666528",
"179477199284833202379375428347980354786",
"312480222250217645006778648212679949130",
"314543507040991882890378359474810089450",
"235948113649741128556398669173371333425",
"164483634386077128027241956451505197708",
"183189645098710955767238707651902810425",
"50478338057853078796698474751733576499"
]
},
"signature_version": "v1"
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_find_ccb_by_cid"
},
"id": "ASB-A-447536200-7c073fbf",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 318.0,
"function_hash": "161396794554933336749352277169402152545"
},
"signature_version": "v1"
},
{
"digest": {
"length": 3528.0,
"function_hash": "135891749664453553410849230616205028341"
},
"id": "ASB-A-447536200-85628514",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "process_service_search_attr_rsp"
}
},
{
"digest": {
"length": 284.0,
"function_hash": "321253627777962018752892434377834609709"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"id": "ASB-A-447536200-8cb6f0f3",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_find_ccb_by_db"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-a425e0c2",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_build_attrib_seq"
},
"digest": {
"length": 678.0,
"function_hash": "294350224971533841332535454650550480264"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-b84a7481",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_process_pend_ccb_same_cid"
},
"digest": {
"length": 392.0,
"function_hash": "51906606051393105916285679985183477357"
}
},
{
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "process_service_attr_rsp"
},
"id": "ASB-A-447536200-b9e2fd9f",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2543.0,
"function_hash": "147894309073835760763737170124141275467"
},
"signature_version": "v1"
},
{
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "sdp_snd_service_search_req"
},
"id": "ASB-A-447536200-bcac08a1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1357.0,
"function_hash": "73857224782077910049613307889255999820"
},
"signature_version": "v1"
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_allocate_ccb"
},
"id": "ASB-A-447536200-cefd9b54",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 306.0,
"function_hash": "185248776116333911992658732841792976773"
},
"signature_version": "v1"
},
{
"digest": {
"length": 513.0,
"function_hash": "16144016054025343443327941460178366551"
},
"id": "ASB-A-447536200-de711d85",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_get_attrib_seq_len"
}
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_get_active_ccb_cid"
},
"id": "ASB-A-447536200-f6c451b2",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 428.0,
"function_hash": "268203369504127249340521470771014775229"
},
"signature_version": "v1"
}
]
}{
"spl": "2026-06-01",
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765"
],
"types": [
"RCE"
],
"vanir_signatures": [
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_allocate_ccb"
},
"id": "ASB-A-447536200-01221c2b",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "54787946774131276834997011142070032338"
},
"signature_version": "v1"
},
{
"target": {
"file": "system/stack/sdp/sdpint.h"
},
"id": "ASB-A-447536200-02a2e14b",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"171078056534141121881746231170084347661",
"170947527587775249395543101524768367324",
"258573597564683953108495265542610645476",
"328736490807440130119498483174093372464"
]
},
"signature_version": "v1"
},
{
"digest": {
"length": 420.0,
"function_hash": "80933393125222945169276068956322292293"
},
"id": "ASB-A-447536200-1f232d1b",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_clear_pend_ccb"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"245274500916817765685026299223726931501",
"261107640071343295284311259762648782367",
"280871192533331872490680348279995469507",
"159758736012175431084880502847943668461",
"312665254395866983748225937565226607594",
"155553672837112500187961424711653847152",
"183658112776456884982317791669428260512",
"245274500916817765685026299223726931501",
"239216014942955512543650145673427277677",
"37095494119066417819874032828651970831",
"193361253108039010474392589263493625407",
"131547622748974736285629891326986368741",
"278236368816588612270418516681587099013",
"284770161684915356956004941730926158323",
"305616741311290478236511749051214208940",
"76985485075227398684660142720497034879",
"65954147434926373067775428596254591438",
"51778380885260079002472106207060386654",
"298845928710937452972966093599563997059",
"287725367748858497641260553031501012666",
"276576309933893761289846244921743107883",
"152922577545610054467656687284007472864",
"304295685645017222468866694584391935067",
"32260036647202101542321266565207101459",
"195062101594314683239219202772270039101",
"280650560292466829771637302790996489161",
"291243410863650913579494073112024021213",
"305616741311290478236511749051214208940",
"76985485075227398684660142720497034879",
"65954147434926373067775428596254591438",
"60835984753162607771912530381849305263",
"202071630383348982842554994678484635834"
]
},
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"id": "ASB-A-447536200-2722c5b0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_discovery.cc"
}
},
{
"digest": {
"length": 3604.0,
"function_hash": "241885653638003086859494901313903625041"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"id": "ASB-A-447536200-3deb900a",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "process_service_search_attr_rsp"
}
},
{
"digest": {
"length": 740.0,
"function_hash": "78343784564162593110955058439191107236"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"id": "ASB-A-447536200-426e7843",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_process_pend_ccb_new_cid"
}
},
{
"digest": {
"length": 185.0,
"function_hash": "333724087067145912869271161799429386418"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"id": "ASB-A-447536200-43acb9de",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_is_base_uuid"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-5b53f231",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_build_attrib_seq"
},
"digest": {
"length": 682.0,
"function_hash": "65679401819610885128879197593996558186"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-5f607313",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"326370735855782173290088333519199024501",
"23775190123876185367952224390436993630",
"214008033334314886152430659070161006070",
"19158865299871508974583687411596965783",
"108404385497647739189959524256453112757",
"304463337081961149951185785977887023747",
"90154277084635067974258224429291730575",
"274969701243507201424821078372926604986",
"278365189175265788358718205491501046780",
"231084207802152130568933406874529808348",
"221859579320574027536831881722138168489",
"144313513534590638134725235298719246491",
"32543603161677176855104810085841475209",
"26754928882030398912622750934244099367",
"157294517388950836013497118318277650405",
"48185019849494187661612053535622932786",
"167521774277652692342849343101078533110",
"276756990864081341744246601161355618197",
"74273699812742365430141261706142631460",
"34647836671808944544916338826853468026",
"334324837258436036672063254752341890796",
"46307960329306334866436444378705138076",
"179749108502613592247648680954611298347",
"236251186616068309474544052909372766471",
"119246952202329294236808126097919144893",
"139224628970119815935533933945979508547",
"91013505136131953619925512187470977113",
"49883370931429588927880830416878931236",
"70877147429192502848043836931041021146",
"306998342490107075672154028662122706074",
"252601170005359041027288205100501752322",
"67078385489255641139962012911637787104",
"52529972395341481296516571846908603738",
"154229003422302414995266222010052262995",
"306269228552719857307932085848829441729",
"185185180429629931402327951989947970450",
"304360568698892400282016347847436309157",
"112132681103412679542392778145806142316",
"168361769482275271245464666724613642538",
"212811995986721383140016008002199073860",
"309311720268083120908592299428973346565",
"316560629611697645921225785457231240235",
"233257058859039914057226832547395699501",
"12599416583967498031884446909047241290",
"21756245403317452600140451063624359492",
"32288059406285717573537828019028935314",
"311448689938422014763309863834569663926",
"193930503312197903953190909580389544862",
"306269228552719857307932085848829441729",
"185185180429629931402327951989947970450",
"99199587304693493220773868781022884981",
"326631676306538573570444043739411462570",
"137425355368622959117415691134457687761",
"264189053794117285838469680204300536083",
"154577415408098892618715483155904229563",
"102816232909661194573612923711765279610",
"217559866803613539181936902618958470861",
"201231236171259407064836701161991166312",
"108631665475905534738327248248822642075",
"51445223963378330972303350929557905991",
"199453958352446924736154211746824617573",
"82968710789178680278744926141136139424",
"108712289331515478568327924746544825520",
"89376339245645909852432352248151532356",
"169672469906830227547459443234812288195",
"197657977485633135660875508687874485253",
"187450595241006105693429992055939501030",
"259763838707751556659522844238805527769",
"225298182088182573997019063648279313760",
"141751588404925206638793119708321271300",
"16354430546490706990457278431273215788",
"38433798499403747781527309899318996623",
"178895073226500160457343647740838484659",
"90349375008200988480856512099154006686",
"194646932120628440495656481768784140803",
"246326683515591731197641092874218477180",
"155872781830939399377585313960684436835",
"312480222250217645006778648212679949130",
"314543507040991882890378359474810089450",
"235948113649741128556398669173371333425",
"164483634386077128027241956451505197708",
"183189645098710955767238707651902810425",
"50478338057853078796698474751733576499"
]
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-5f90a9ce",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_process_pend_ccb_same_cid"
},
"digest": {
"length": 429.0,
"function_hash": "1006278776863331260199144266564773463"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-88cbf484",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_find_ccb_by_db"
},
"digest": {
"length": 300.0,
"function_hash": "111669523368200778989000892464108701398"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-903d3874",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "sdp_snd_service_search_req"
},
"digest": {
"length": 1496.0,
"function_hash": "319676069720130263146922114782178272468"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-9ab24f34",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_find_ccb_by_cid"
},
"digest": {
"length": 336.0,
"function_hash": "80754606558893926492832094027308066581"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-aa6bd2bd",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "process_service_attr_rsp"
},
"digest": {
"length": 2673.0,
"function_hash": "228124477976245695124745732923622025023"
}
},
{
"digest": {
"length": 324.0,
"function_hash": "214643982189623892415196064866639173907"
},
"id": "ASB-A-447536200-be6b64c9",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_dump_all_ccb"
}
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_get_active_ccb_cid"
},
"id": "ASB-A-447536200-cb0c373a",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 465.0,
"function_hash": "279338205253987393261141600593878522533"
},
"signature_version": "v1"
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-d703522e",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_get_attrib_seq_len"
},
"digest": {
"length": 521.0,
"function_hash": "150730886917213782520724660801541534010"
}
}
],
"severity": "High"
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0"
],
"severity": "High",
"types": [
"RCE"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"digest": {
"length": 420.0,
"function_hash": "80933393125222945169276068956322292293"
},
"id": "ASB-A-447536200-07602cff",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_clear_pend_ccb"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-2414d0ac",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_allocate_ccb"
},
"digest": {
"length": 322.0,
"function_hash": "54787946774131276834997011142070032338"
}
},
{
"digest": {
"length": 336.0,
"function_hash": "80754606558893926492832094027308066581"
},
"id": "ASB-A-447536200-256a91c7",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_find_ccb_by_cid"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-2abb71bf",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "sdp_snd_service_search_req"
},
"digest": {
"length": 1496.0,
"function_hash": "319676069720130263146922114782178272468"
}
},
{
"digest": {
"length": 740.0,
"function_hash": "78343784564162593110955058439191107236"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"id": "ASB-A-447536200-2d491f1e",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_process_pend_ccb_new_cid"
}
},
{
"digest": {
"length": 429.0,
"function_hash": "1006278776863331260199144266564773463"
},
"id": "ASB-A-447536200-4d16753d",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_process_pend_ccb_same_cid"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-5ef28fbc",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_clear_all_ccbs_for_cid"
},
"digest": {
"length": 341.0,
"function_hash": "81482547451265556306424903678459766129"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-67b44505",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_get_active_ccb_cid"
},
"digest": {
"length": 465.0,
"function_hash": "279338205253987393261141600593878522533"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-6c7bfe88",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_discovery.cc"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"245274500916817765685026299223726931501",
"261107640071343295284311259762648782367",
"280871192533331872490680348279995469507",
"159758736012175431084880502847943668461",
"312665254395866983748225937565226607594",
"155553672837112500187961424711653847152",
"183658112776456884982317791669428260512",
"245274500916817765685026299223726931501",
"239216014942955512543650145673427277677",
"37095494119066417819874032828651970831",
"193361253108039010474392589263493625407",
"131547622748974736285629891326986368741",
"143033073766739784571993086891917467312",
"284770161684915356956004941730926158323",
"305616741311290478236511749051214208940",
"76985485075227398684660142720497034879",
"65954147434926373067775428596254591438",
"51778380885260079002472106207060386654",
"298845928710937452972966093599563997059",
"287725367748858497641260553031501012666",
"276576309933893761289846244921743107883",
"152922577545610054467656687284007472864",
"304295685645017222468866694584391935067",
"32260036647202101542321266565207101459",
"195062101594314683239219202772270039101",
"280650560292466829771637302790996489161",
"291243410863650913579494073112024021213",
"305616741311290478236511749051214208940",
"76985485075227398684660142720497034879",
"65954147434926373067775428596254591438",
"60835984753162607771912530381849305263",
"202071630383348982842554994678484635834"
]
}
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_build_attrib_seq"
},
"id": "ASB-A-447536200-80d7c93a",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 682.0,
"function_hash": "65679401819610885128879197593996558186"
},
"signature_version": "v1"
},
{
"target": {
"file": "system/stack/sdp/sdpint.h"
},
"id": "ASB-A-447536200-8b309539",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"171078056534141121881746231170084347661",
"170947527587775249395543101524768367324",
"258573597564683953108495265542610645476",
"328736490807440130119498483174093372464"
]
},
"signature_version": "v1"
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-9f6c7dfe",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_is_base_uuid"
},
"digest": {
"length": 185.0,
"function_hash": "333724087067145912869271161799429386418"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-ae55985d",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_dump_all_ccb"
},
"digest": {
"length": 324.0,
"function_hash": "214643982189623892415196064866639173907"
}
},
{
"digest": {
"length": 3642.0,
"function_hash": "200039696306405254345323423075009536239"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"id": "ASB-A-447536200-b574b561",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "process_service_search_attr_rsp"
}
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc"
},
"id": "ASB-A-447536200-b9d6cb6a",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Line",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"326370735855782173290088333519199024501",
"23775190123876185367952224390436993630",
"214008033334314886152430659070161006070",
"19158865299871508974583687411596965783",
"108404385497647739189959524256453112757",
"304463337081961149951185785977887023747",
"90154277084635067974258224429291730575",
"274969701243507201424821078372926604986",
"278365189175265788358718205491501046780",
"231084207802152130568933406874529808348",
"221859579320574027536831881722138168489",
"144313513534590638134725235298719246491",
"32543603161677176855104810085841475209",
"26754928882030398912622750934244099367",
"157294517388950836013497118318277650405",
"48185019849494187661612053535622932786",
"167521774277652692342849343101078533110",
"276756990864081341744246601161355618197",
"74273699812742365430141261706142631460",
"34647836671808944544916338826853468026",
"334324837258436036672063254752341890796",
"46307960329306334866436444378705138076",
"179749108502613592247648680954611298347",
"236251186616068309474544052909372766471",
"119246952202329294236808126097919144893",
"139224628970119815935533933945979508547",
"91013505136131953619925512187470977113",
"49883370931429588927880830416878931236",
"70877147429192502848043836931041021146",
"306998342490107075672154028662122706074",
"252601170005359041027288205100501752322",
"67078385489255641139962012911637787104",
"52529972395341481296516571846908603738",
"154229003422302414995266222010052262995",
"306269228552719857307932085848829441729",
"185185180429629931402327951989947970450",
"304360568698892400282016347847436309157",
"112132681103412679542392778145806142316",
"168361769482275271245464666724613642538",
"212811995986721383140016008002199073860",
"309311720268083120908592299428973346565",
"316560629611697645921225785457231240235",
"233257058859039914057226832547395699501",
"12599416583967498031884446909047241290",
"21756245403317452600140451063624359492",
"32288059406285717573537828019028935314",
"311448689938422014763309863834569663926",
"193930503312197903953190909580389544862",
"306269228552719857307932085848829441729",
"185185180429629931402327951989947970450",
"99199587304693493220773868781022884981",
"12064174143542204562024668115732699549",
"313187825757134591379171286585886808814",
"327215228318906691143183335563639566379",
"79272656834164451933794474062533160745",
"178544324326528763576308132597231427274",
"256935188940384320821465600702650672030",
"326631676306538573570444043739411462570",
"137425355368622959117415691134457687761",
"264189053794117285838469680204300536083",
"154577415408098892618715483155904229563",
"102816232909661194573612923711765279610",
"217559866803613539181936902618958470861",
"201231236171259407064836701161991166312",
"108631665475905534738327248248822642075",
"51445223963378330972303350929557905991",
"199453958352446924736154211746824617573",
"82968710789178680278744926141136139424",
"108712289331515478568327924746544825520",
"89376339245645909852432352248151532356",
"169672469906830227547459443234812288195",
"197657977485633135660875508687874485253",
"187450595241006105693429992055939501030",
"259763838707751556659522844238805527769",
"225298182088182573997019063648279313760",
"141751588404925206638793119708321271300",
"16354430546490706990457278431273215788",
"38433798499403747781527309899318996623",
"178895073226500160457343647740838484659",
"90349375008200988480856512099154006686",
"194646932120628440495656481768784140803",
"246326683515591731197641092874218477180",
"155872781830939399377585313960684436835",
"312480222250217645006778648212679949130",
"314543507040991882890378359474810089450",
"235948113649741128556398669173371333425",
"164483634386077128027241956451505197708",
"183189645098710955767238707651902810425",
"50478338057853078796698474751733576499"
]
},
"signature_version": "v1"
},
{
"digest": {
"length": 2673.0,
"function_hash": "228124477976245695124745732923622025023"
},
"id": "ASB-A-447536200-c542ffa3",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "process_service_attr_rsp"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-d904fee8",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_get_attrib_seq_len"
},
"digest": {
"length": 521.0,
"function_hash": "150730886917213782520724660801541534010"
}
},
{
"digest": {
"length": 300.0,
"function_hash": "111669523368200778989000892464108701398"
},
"id": "ASB-A-447536200-e51206e3",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_find_ccb_by_db"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5"
],
"severity": "High",
"vanir_signatures": [
{
"digest": {
"length": 428.0,
"function_hash": "268203369504127249340521470771014775229"
},
"id": "ASB-A-447536200-0f2000f3",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_get_active_ccb_cid"
}
},
{
"digest": {
"length": 392.0,
"function_hash": "51906606051393105916285679985183477357"
},
"id": "ASB-A-447536200-33aef207",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_process_pend_ccb_same_cid"
}
},
{
"digest": {
"length": 284.0,
"function_hash": "321253627777962018752892434377834609709"
},
"id": "ASB-A-447536200-3a506856",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_find_ccb_by_db"
}
},
{
"digest": {
"length": 678.0,
"function_hash": "294350224971533841332535454650550480264"
},
"id": "ASB-A-447536200-40db2f60",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_build_attrib_seq"
}
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_is_base_uuid"
},
"id": "ASB-A-447536200-5229901c",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 185.0,
"function_hash": "208546097822161473594154319925646749696"
},
"signature_version": "v1"
},
{
"digest": {
"length": 372.0,
"function_hash": "316212770131371436286519623397336237357"
},
"id": "ASB-A-447536200-6e9efd5b",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_clear_pend_ccb"
}
},
{
"digest": {
"length": 1196.0,
"function_hash": "185511266961220871417896236587016407159"
},
"id": "ASB-A-447536200-7d467f85",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "sdp_snd_service_search_req"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-95595d1b",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_process_pend_ccb_new_cid"
},
"digest": {
"length": 625.0,
"function_hash": "265068443550774229780860342413028575553"
}
},
{
"digest": {
"length": 3352.0,
"function_hash": "137824660385644395807534434788393530333"
},
"id": "ASB-A-447536200-a8f92035",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "process_service_search_attr_rsp"
}
},
{
"digest": {
"length": 2375.0,
"function_hash": "283483212780402653971868260915573482889"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"id": "ASB-A-447536200-b170d237",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_discovery.cc",
"function": "process_service_attr_rsp"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-b2498fdf",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_utils.cc"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"326370735855782173290088333519199024501",
"168484737811878346476233804207844102802",
"209855550805138250423092381834766273225",
"270635274930716844049003356273687678094",
"35436834977655841040790079453909089138",
"220760902501378382155048574824173680689",
"115514079460509737281765431370265493595",
"264567184784687710178383146007433450256",
"187612247867437204207291813035662472450",
"244534874859023549461483857930705054685",
"236860252472128135954545952216777379271",
"314347501146288078239009769938107745555",
"335635115093336676414886775784852034944",
"305409964575734714147609171868653136022",
"216753756236515197432872685449490267809",
"72923339473680657477029268661882284535",
"12388186395672872938962820315297379170",
"294325273084886363883312843215450402740",
"288009977742297230995318154240597858412",
"318916258940453183509867537111764787343",
"334578430779693349322848087524705004496",
"253810660964793155643776332215935440335",
"82940527776583746352715246972010390065",
"188939913193119186317185389500148929266",
"299980396087160819537571327673927603649",
"248540149873802503755277051623794251175",
"199807422108682321122217058621257728022",
"11625168764582711805871222798910270171",
"230224199089253317929709415374938866428",
"311804297712642271149551374327002463786",
"136322865108038674428021675166742603321",
"217004413781050003220444925721375424194",
"99907716076257563476849358806210622176",
"157066826348609771402794977173593848574",
"162937564018798944678715653955007552850",
"328947380536869477407505614412193768967",
"215089919965880416929432952714073707934",
"245720050566093072363892831534780966362",
"136322865108038674428021675166742603321",
"243025138387903154865409534615720559931",
"193515975318773987868370188795133729651",
"129606122677402709963051695211538735221",
"230224199089253317929709415374938866428",
"311804297712642271149551374327002463786",
"136322865108038674428021675166742603321",
"178471867417679587374181406900292538190",
"78240578126920771397608582533241210579",
"10021676309050580608348405789842091724",
"97340881592337826414141165792030715775",
"316541200221134718438491709068700218407",
"152820968930503425259694623337199103001",
"6183317276182603485105702155572644745",
"47583654619010511337980586558146490640",
"67028234233707455533253824454951475441",
"287659366736639719616329542557909764796",
"75227255106732586204217689819467596758",
"68708104641908612620073674231858830650",
"121739399516288288285404311758313045303",
"176667335615767700481509840876035817237",
"139384029423412105122811606899191639880",
"295976341110895970466300820547144591938",
"187450595241006105693429992055939501030",
"259763838707751556659522844238805527769",
"225298182088182573997019063648279313760",
"141751588404925206638793119708321271300",
"16354430546490706990457278431273215788",
"117367199946443104980179049542708737775",
"103430217550062819751943427571824005012",
"113306698009149581613564880102064838492",
"172711697904102539492773343677023438809",
"290609846976860001417399293487738666528",
"179477199284833202379375428347980354786",
"312480222250217645006778648212679949130",
"314543507040991882890378359474810089450",
"235948113649741128556398669173371333425",
"164483634386077128027241956451505197708",
"183189645098710955767238707651902810425",
"50478338057853078796698474751733576499"
]
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"245975806998326282897736415136276715524",
"227635983820497233123737089326974992700",
"333298292523052068529268180816754694612",
"136551380523486633017351997876088482372"
]
},
"id": "ASB-A-447536200-c9e43520",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdpint.h"
}
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_allocate_ccb"
},
"id": "ASB-A-447536200-ddbc3104",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 334.0,
"function_hash": "163357353377803991905001215573021738773"
},
"signature_version": "v1"
},
{
"digest": {
"length": 318.0,
"function_hash": "161396794554933336749352277169402152545"
},
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"id": "ASB-A-447536200-e88cbdbd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_find_ccb_by_cid"
}
},
{
"signature_version": "v1",
"id": "ASB-A-447536200-ebcd4771",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "system/stack/sdp/sdp_discovery.cc"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"183658112776456884982317791669428260512",
"245274500916817765685026299223726931501",
"261107640071343295284311259762648782367",
"107432523268821900211035860330276751102",
"159758736012175431084880502847943668461",
"312665254395866983748225937565226607594",
"287725367748858497641260553031501012666",
"276576309933893761289846244921743107883",
"152922577545610054467656687284007472864",
"304295685645017222468866694584391935067",
"32260036647202101542321266565207101459",
"195062101594314683239219202772270039101",
"140943815529429886940162158830286155510",
"332603156978438045215459941919583329411",
"390938992300505522195875478186405772",
"209092327733482572776398202651444387212",
"240050482495480845480262458032094524268",
"68314242089519690823758425391443762558",
"314957757806087263563056318967461454051",
"286660203041770791370329292598644301060",
"183658112776456884982317791669428260512",
"245274500916817765685026299223726931501",
"239216014942955512543650145673427277677",
"171190651436066523382397299537867725127",
"193361253108039010474392589263493625407",
"44259014220124156151158169539784005727",
"83615662073872901412605072790669479592",
"332603156978438045215459941919583329411",
"390938992300505522195875478186405772",
"209092327733482572776398202651444387212",
"1007792411899903657847015103372108454",
"215784879440283593456859045336608473736",
"265917009288791384330916886080142152618"
]
}
},
{
"target": {
"file": "system/stack/sdp/sdp_utils.cc",
"function": "sdpu_get_attrib_seq_len"
},
"id": "ASB-A-447536200-f6b407f1",
"source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5",
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 513.0,
"function_hash": "16144016054025343443327941460178366551"
},
"signature_version": "v1"
}
],
"spl": "2026-06-01",
"types": [
"RCE"
]
}