In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"types": [
"DoS"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1228.0,
"function_hash": "138717003723902906835013162849558440742"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f",
"id": "ASB-A-449392803-02f2ce5f",
"signature_type": "Function",
"target": {
"function": "switchUser",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1083.0,
"function_hash": "158007224603552508641978198383820720629"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f",
"id": "ASB-A-449392803-07adcee6",
"target": {
"function": "onPackageUpdateFinished",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 368.0,
"function_hash": "182733235403553239234182109669333400036"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f",
"id": "ASB-A-449392803-088204a9",
"signature_type": "Function",
"target": {
"function": "updateTileServiceMapForAccessibilityActivityLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 673.0,
"function_hash": "46382847063061254203452377255292772873"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f",
"id": "ASB-A-449392803-13801b18",
"signature_type": "Function",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java",
"function": "onSomePackagesChanged"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 916.0,
"function_hash": "279059083257965331738457561134511298787"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f",
"id": "ASB-A-449392803-2fe9969d",
"signature_type": "Function",
"target": {
"function": "readConfigurationForUserStateLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f",
"deprecated": false,
"digest": {
"length": 443.0,
"function_hash": "64364135927694927814711976573721714682"
},
"signature_version": "v1",
"id": "ASB-A-449392803-3fab756f",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java",
"function": "updateTileServiceMapForAccessibilityServiceLocked"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"54636898681686642278662376869356704519",
"109846792958080615622410915779959688555",
"146116054609994092270998233447875302064",
"81730047956691743963807491631800058348",
"170148651789184924196457447890644741885",
"135936644985592946908302651469685824641",
"192284645335105782888578277604628690068",
"62250779571468408085177951210228170051",
"114364454369985549020915301226734676346",
"281486556049931741556266482992315420399",
"192713344534639436602364853996199252329",
"51760832693758729578905511485775359479",
"272269730960383090918109518663794790736",
"339693414704101599411293099586289470668",
"33441863864809947003621461578852562021",
"53669211394517226755797950780987000396",
"54607045748566019084587947918123261674",
"106210903665520892575754230329124105462",
"148154910575688364480097455239426770859",
"291532095798460875486385823810843388620",
"186442970602719568250510753529097765383",
"194362084170869605142001615336734431348",
"52282772247860889881600352095998971939",
"119828400286049808400137997275770472878",
"97333308619754220475852192910176271582",
"124845542352049634761843777832285721982",
"122571863258797594311504928296642582860",
"231727887998161192280353467626091032886",
"334258510170836360111552012217853873596",
"119258988697698457769296765622298402469",
"3305686934805184468401085878387374675",
"288417658121498591846264727478452922878",
"139324110446976069823518963902155300260",
"123902656295732968449851056777582724362",
"244848831570756054853224190989322241708",
"55405980957551815368694869708977673085",
"116111700225185583502736183164795248033",
"166388723088880267857129121466932116981",
"2634033747878264964375933690382634070",
"277231917871428656544604684368166546356",
"119258988697698457769296765622298402469",
"223083851933708613633242883777175561018",
"320601688012816912638224387010985050406",
"154978408318231525883656642755319816644",
"15515378731185103554759285832965521685",
"319986566517948073498769834735766870994",
"245429477519024495280797418383000933931",
"70284491177206860214684039121797492210",
"216935258489016205617940050738273900421",
"324336054423442223616680488717903193869",
"216348211228831063721553359498120423937",
"228606104343718195929740365912029866935",
"323201263137815998930777444926949865228",
"74969346579200031903926023821165339485",
"106972368884910480321075559047974486614",
"323474544160009674008746496331493900707",
"244404565606074794944675618320722120732",
"142387034493661912529279207911521439491",
"114639728059021226296237503310840792841",
"228606104343718195929740365912029866935",
"323201263137815998930777444926949865228",
"74969346579200031903926023821165339485",
"102437598635449136193939120459258136012",
"159930801976312076727231375064182725139",
"301530219132031097169786606164101131775",
"332573714291936206912311667462530123783",
"100901033211237276833815265525822720020"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f",
"id": "ASB-A-449392803-537a1abf",
"signature_type": "Line",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 443.0,
"function_hash": "105842653713307376498682071651833450520"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f",
"id": "ASB-A-449392803-8a6ad132",
"target": {
"function": "readInstalledAccessibilityServiceLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 211.0,
"function_hash": "18151654561461670705906240591569742102"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f",
"id": "ASB-A-449392803-b8316e89",
"signature_type": "Function",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java",
"function": "onSomePackagesChangedLocked"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 573.0,
"function_hash": "311253680600533228197985703480932244134"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f",
"id": "ASB-A-449392803-cc415b58",
"signature_type": "Function",
"target": {
"function": "readInstalledAccessibilityShortcutLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"298012318091475284822466120482120656662",
"242007780290267437324312225994925312344",
"306705114568248396037486420752263409068",
"199654044136486390164212061679460800618",
"164669514458677787473575912443469192490",
"100022387324906554865303953793137410900",
"307265552038127283963502339773542907863",
"279468517510333892269932564900379685837",
"243624615711914041248265331309295497345",
"126593298122563406562448832101706504136",
"235962060026095382923686571923931929870",
"150414230502483546543667667885304045417",
"152020055647340352978171191676789031444",
"187371485382716041877484416713769005089",
"116924699937578968433752349242587584118",
"146409211816986476433808362591081088334",
"126679659209923448136172779775671924379",
"171405070349692089820115937917611306345"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/637f5b4aa4fbc87010f49f69555f6d14caef6a1f",
"id": "ASB-A-449392803-ec35871a",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java"
},
"signature_type": "Line"
}
],
"severity": "High"
}
{
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"https://android.googlesource.com/platform/frameworks/base/+/59bb21aa9924344a6008c00b5ce4a6044abf4f7e"
],
"spl": "2026-06-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 449.0,
"function_hash": "12128848326528096129800347601826553753"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"id": "ASB-A-449392803-0638b1ca",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java",
"function": "updateTileServiceMapForAccessibilityServiceLocked"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 600.0,
"function_hash": "283139064076304609651449411494284729923"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"id": "ASB-A-449392803-2a7166d1",
"target": {
"function": "readConfigurationForUserStateLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 474.0,
"function_hash": "162353182103837133694634890979552159885"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"id": "ASB-A-449392803-5abbd034",
"target": {
"function": "readInstalledAccessibilityServiceLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"54636898681686642278662376869356704519",
"109846792958080615622410915779959688555",
"255756964373450451842069334343882837448",
"56753823978103557609304458304857011821",
"302976092758116393012170213386982894115",
"73199352826011728886012849018897585541",
"192284645335105782888578277604628690068",
"62250779571468408085177951210228170051",
"214971052537366566610218951158385913024",
"302197492311751817323030485794162234340",
"54779274389441236524713252316788751602",
"237178560141759675229015796781721377140",
"272269730960383090918109518663794790736",
"339693414704101599411293099586289470668",
"33441863864809947003621461578852562021",
"53669211394517226755797950780987000396",
"54607045748566019084587947918123261674",
"106210903665520892575754230329124105462",
"148154910575688364480097455239426770859",
"291532095798460875486385823810843388620",
"186442970602719568250510753529097765383",
"123369881654886655519152599835491509307",
"274802511660101825141618289219238953000",
"336416881950487807277027388232225807840",
"305676430938992946851657969640841001596",
"81233315822410964596921415537610484665",
"141313486505358708475103012873000608270",
"334258510170836360111552012217853873596",
"119258988697698457769296765622298402469",
"3305686934805184468401085878387374675",
"288417658121498591846264727478452922878",
"139324110446976069823518963902155300260",
"123902656295732968449851056777582724362",
"226041545737687433399120516650769826400",
"294684885139540593650819432926888672036",
"146193704874083580960508400492590477189",
"166388723088880267857129121466932116981",
"2634033747878264964375933690382634070",
"277231917871428656544604684368166546356",
"119258988697698457769296765622298402469",
"223083851933708613633242883777175561018",
"320601688012816912638224387010985050406",
"154978408318231525883656642755319816644",
"15515378731185103554759285832965521685",
"319986566517948073498769834735766870994",
"245429477519024495280797418383000933931",
"70284491177206860214684039121797492210",
"216935258489016205617940050738273900421",
"324336054423442223616680488717903193869",
"216348211228831063721553359498120423937",
"228606104343718195929740365912029866935",
"323201263137815998930777444926949865228",
"74969346579200031903926023821165339485",
"106972368884910480321075559047974486614",
"323474544160009674008746496331493900707",
"244404565606074794944675618320722120732",
"142387034493661912529279207911521439491",
"114639728059021226296237503310840792841",
"228606104343718195929740365912029866935",
"323201263137815998930777444926949865228",
"74969346579200031903926023821165339485",
"102437598635449136193939120459258136012",
"159930801976312076727231375064182725139",
"301530219132031097169786606164101131775",
"332573714291936206912311667462530123783",
"100901033211237276833815265525822720020"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"id": "ASB-A-449392803-68d23e5d",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"298012318091475284822466120482120656662",
"242007780290267437324312225994925312344",
"179703949890758600449557798738212284974",
"338904376491934710637003450513426683142",
"194931959738547903827581448184088686410",
"100022387324906554865303953793137410900",
"307265552038127283963502339773542907863",
"279468517510333892269932564900379685837",
"243624615711914041248265331309295497345",
"158104698473105131401609236377627362140",
"310370639952192209654352016216713284125",
"107730228945353298790350233439665142775",
"150414230502483546543667667885304045417",
"152020055647340352978171191676789031444",
"187371485382716041877484416713769005089",
"116924699937578968433752349242587584118",
"146409211816986476433808362591081088334",
"126679659209923448136172779775671924379",
"171405070349692089820115937917611306345"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"id": "ASB-A-449392803-9f873a84",
"signature_type": "Line",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java"
}
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"deprecated": false,
"digest": {
"length": 697.0,
"function_hash": "199821827732936625347788502442122833436"
},
"signature_version": "v1",
"id": "ASB-A-449392803-a9716a02",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java",
"function": "onSomePackagesChanged"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 208.0,
"function_hash": "68334383873674222578808241115715689891"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"id": "ASB-A-449392803-aa713580",
"target": {
"function": "onSomePackagesChangedLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 258.0,
"function_hash": "298765061916485832033350644714957723909"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"id": "ASB-A-449392803-b951777b",
"signature_type": "Function",
"target": {
"function": "readInstalledAccessibilityShortcutLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1080.0,
"function_hash": "107289719469064113582154400370374411210"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"id": "ASB-A-449392803-c75d12e8",
"signature_type": "Function",
"target": {
"function": "onPackageUpdateFinished",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"deprecated": false,
"digest": {
"length": 368.0,
"function_hash": "182733235403553239234182109669333400036"
},
"signature_version": "v1",
"id": "ASB-A-449392803-d5b04706",
"target": {
"function": "updateTileServiceMapForAccessibilityActivityLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java"
},
"signature_type": "Function"
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/25fdbe5f215f24201f4c2e526cbfa801f6f1d10b",
"deprecated": false,
"digest": {
"length": 994.0,
"function_hash": "205509997017427718249467373069268607915"
},
"signature_version": "v1",
"id": "ASB-A-449392803-f9b57023",
"target": {
"function": "switchUser",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Function"
}
]
}
{
"vanir_signatures": [
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 605.0,
"function_hash": "190763576280593177269787368999076532492"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70",
"id": "ASB-A-449392803-0c0148c2",
"target": {
"function": "readInstalledAccessibilityShortcutLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 368.0,
"function_hash": "182733235403553239234182109669333400036"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70",
"id": "ASB-A-449392803-19cb55dd",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java",
"function": "updateTileServiceMapForAccessibilityActivityLocked"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 208.0,
"function_hash": "68334383873674222578808241115715689891"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70",
"id": "ASB-A-449392803-1e9698c7",
"target": {
"function": "onSomePackagesChangedLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"54636898681686642278662376869356704519",
"109846792958080615622410915779959688555",
"255756964373450451842069334343882837448",
"56753823978103557609304458304857011821",
"302976092758116393012170213386982894115",
"73199352826011728886012849018897585541",
"192284645335105782888578277604628690068",
"62250779571468408085177951210228170051",
"214971052537366566610218951158385913024",
"302197492311751817323030485794162234340",
"54779274389441236524713252316788751602",
"205937954470134510555634390417724712117",
"272269730960383090918109518663794790736",
"339693414704101599411293099586289470668",
"33441863864809947003621461578852562021",
"53669211394517226755797950780987000396",
"54607045748566019084587947918123261674",
"106210903665520892575754230329124105462",
"148154910575688364480097455239426770859",
"291532095798460875486385823810843388620",
"186442970602719568250510753529097765383",
"123369881654886655519152599835491509307",
"274802511660101825141618289219238953000",
"336416881950487807277027388232225807840",
"305676430938992946851657969640841001596",
"81233315822410964596921415537610484665",
"141313486505358708475103012873000608270",
"334258510170836360111552012217853873596",
"119258988697698457769296765622298402469",
"3305686934805184468401085878387374675",
"288417658121498591846264727478452922878",
"139324110446976069823518963902155300260",
"123902656295732968449851056777582724362",
"43428897117613888361091068197921743811",
"66199788744857060325367209412467302958",
"116111700225185583502736183164795248033",
"166388723088880267857129121466932116981",
"2634033747878264964375933690382634070",
"277231917871428656544604684368166546356",
"119258988697698457769296765622298402469",
"223083851933708613633242883777175561018",
"320601688012816912638224387010985050406",
"154978408318231525883656642755319816644",
"15515378731185103554759285832965521685",
"319986566517948073498769834735766870994",
"245429477519024495280797418383000933931",
"70284491177206860214684039121797492210",
"216935258489016205617940050738273900421",
"324336054423442223616680488717903193869",
"216348211228831063721553359498120423937",
"228606104343718195929740365912029866935",
"323201263137815998930777444926949865228",
"74969346579200031903926023821165339485",
"106972368884910480321075559047974486614",
"323474544160009674008746496331493900707",
"244404565606074794944675618320722120732",
"142387034493661912529279207911521439491",
"114639728059021226296237503310840792841",
"228606104343718195929740365912029866935",
"323201263137815998930777444926949865228",
"74969346579200031903926023821165339485",
"102437598635449136193939120459258136012",
"159930801976312076727231375064182725139",
"301530219132031097169786606164101131775",
"332573714291936206912311667462530123783",
"100901033211237276833815265525822720020"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70",
"id": "ASB-A-449392803-24460659",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 449.0,
"function_hash": "12128848326528096129800347601826553753"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70",
"id": "ASB-A-449392803-51065b03",
"signature_type": "Function",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java",
"function": "updateTileServiceMapForAccessibilityServiceLocked"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 775.0,
"function_hash": "205450443669085841400355925755587726845"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70",
"id": "ASB-A-449392803-6b3b8287",
"signature_type": "Function",
"target": {
"function": "readConfigurationForUserStateLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"298012318091475284822466120482120656662",
"242007780290267437324312225994925312344",
"179703949890758600449557798738212284974",
"338904376491934710637003450513426683142",
"194931959738547903827581448184088686410",
"100022387324906554865303953793137410900",
"307265552038127283963502339773542907863",
"279468517510333892269932564900379685837",
"243624615711914041248265331309295497345",
"158104698473105131401609236377627362140",
"310370639952192209654352016216713284125",
"107730228945353298790350233439665142775",
"150414230502483546543667667885304045417",
"152020055647340352978171191676789031444",
"187371485382716041877484416713769005089",
"116924699937578968433752349242587584118",
"146409211816986476433808362591081088334",
"126679659209923448136172779775671924379",
"171405070349692089820115937917611306345"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70",
"id": "ASB-A-449392803-6fb34c58",
"signature_type": "Line",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1081.0,
"function_hash": "116726813008006262712432470151633719665"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70",
"id": "ASB-A-449392803-87c15585",
"signature_type": "Function",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java",
"function": "switchUser"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1080.0,
"function_hash": "107289719469064113582154400370374411210"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70",
"id": "ASB-A-449392803-8ea2b938",
"signature_type": "Function",
"target": {
"function": "onPackageUpdateFinished",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 673.0,
"function_hash": "46382847063061254203452377255292772873"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70",
"id": "ASB-A-449392803-e9d04094",
"signature_type": "Function",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java",
"function": "onSomePackagesChanged"
}
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70",
"deprecated": false,
"digest": {
"length": 474.0,
"function_hash": "162353182103837133694634890979552159885"
},
"signature_version": "v1",
"id": "ASB-A-449392803-ea91c1b8",
"target": {
"function": "readInstalledAccessibilityServiceLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Function"
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/9d9034b7f4fbc742471d4a6ef0585767ead7be70"
],
"spl": "2026-06-01",
"severity": "High",
"types": [
"DoS"
]
}
{
"types": [
"DoS"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c"
],
"spl": "2026-06-01",
"vanir_signatures": [
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"298012318091475284822466120482120656662",
"242007780290267437324312225994925312344",
"179703949890758600449557798738212284974",
"338904376491934710637003450513426683142",
"194931959738547903827581448184088686410",
"100022387324906554865303953793137410900",
"307265552038127283963502339773542907863",
"279468517510333892269932564900379685837",
"243624615711914041248265331309295497345",
"158104698473105131401609236377627362140",
"310370639952192209654352016216713284125",
"107730228945353298790350233439665142775",
"150414230502483546543667667885304045417",
"152020055647340352978171191676789031444",
"187371485382716041877484416713769005089",
"116924699937578968433752349242587584118",
"146409211816986476433808362591081088334",
"126679659209923448136172779775671924379",
"171405070349692089820115937917611306345"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c",
"id": "ASB-A-449392803-020b312a",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 208.0,
"function_hash": "68334383873674222578808241115715689891"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c",
"id": "ASB-A-449392803-21d75f84",
"signature_type": "Function",
"target": {
"function": "onSomePackagesChangedLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"54636898681686642278662376869356704519",
"109846792958080615622410915779959688555",
"255756964373450451842069334343882837448",
"56753823978103557609304458304857011821",
"302976092758116393012170213386982894115",
"73199352826011728886012849018897585541",
"192284645335105782888578277604628690068",
"62250779571468408085177951210228170051",
"114364454369985549020915301226734676346",
"281486556049931741556266482992315420399",
"192713344534639436602364853996199252329",
"51760832693758729578905511485775359479",
"272269730960383090918109518663794790736",
"339693414704101599411293099586289470668",
"33441863864809947003621461578852562021",
"53669211394517226755797950780987000396",
"54607045748566019084587947918123261674",
"106210903665520892575754230329124105462",
"148154910575688364480097455239426770859",
"291532095798460875486385823810843388620",
"186442970602719568250510753529097765383",
"123369881654886655519152599835491509307",
"274802511660101825141618289219238953000",
"336416881950487807277027388232225807840",
"305676430938992946851657969640841001596",
"81233315822410964596921415537610484665",
"141313486505358708475103012873000608270",
"334258510170836360111552012217853873596",
"119258988697698457769296765622298402469",
"3305686934805184468401085878387374675",
"288417658121498591846264727478452922878",
"139324110446976069823518963902155300260",
"123902656295732968449851056777582724362",
"244848831570756054853224190989322241708",
"55405980957551815368694869708977673085",
"116111700225185583502736183164795248033",
"166388723088880267857129121466932116981",
"2634033747878264964375933690382634070",
"277231917871428656544604684368166546356",
"119258988697698457769296765622298402469",
"223083851933708613633242883777175561018",
"320601688012816912638224387010985050406",
"154978408318231525883656642755319816644",
"15515378731185103554759285832965521685",
"319986566517948073498769834735766870994",
"245429477519024495280797418383000933931",
"70284491177206860214684039121797492210",
"216935258489016205617940050738273900421",
"324336054423442223616680488717903193869",
"216348211228831063721553359498120423937",
"228606104343718195929740365912029866935",
"323201263137815998930777444926949865228",
"74969346579200031903926023821165339485",
"106972368884910480321075559047974486614",
"323474544160009674008746496331493900707",
"244404565606074794944675618320722120732",
"142387034493661912529279207911521439491",
"114639728059021226296237503310840792841",
"228606104343718195929740365912029866935",
"323201263137815998930777444926949865228",
"74969346579200031903926023821165339485",
"102437598635449136193939120459258136012",
"159930801976312076727231375064182725139",
"301530219132031097169786606164101131775",
"332573714291936206912311667462530123783",
"100901033211237276833815265525822720020"
]
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c",
"id": "ASB-A-449392803-278483df",
"signature_type": "Line",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1228.0,
"function_hash": "138717003723902906835013162849558440742"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c",
"id": "ASB-A-449392803-65d11f8d",
"signature_type": "Function",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java",
"function": "switchUser"
}
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c",
"deprecated": false,
"digest": {
"length": 474.0,
"function_hash": "162353182103837133694634890979552159885"
},
"signature_version": "v1",
"id": "ASB-A-449392803-699fe149",
"target": {
"function": "readInstalledAccessibilityServiceLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
},
"signature_type": "Function"
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c",
"deprecated": false,
"digest": {
"length": 831.0,
"function_hash": "95001359248320489096646280131584201024"
},
"signature_version": "v1",
"id": "ASB-A-449392803-ad2c1bfa",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java",
"function": "readConfigurationForUserStateLocked"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 573.0,
"function_hash": "311253680600533228197985703480932244134"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c",
"id": "ASB-A-449392803-b83bf623",
"signature_type": "Function",
"target": {
"function": "readInstalledAccessibilityShortcutLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"source": "https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c",
"deprecated": false,
"digest": {
"length": 368.0,
"function_hash": "182733235403553239234182109669333400036"
},
"signature_version": "v1",
"id": "ASB-A-449392803-c2fd1849",
"target": {
"function": "updateTileServiceMapForAccessibilityActivityLocked",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 673.0,
"function_hash": "46382847063061254203452377255292772873"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c",
"id": "ASB-A-449392803-d03979ea",
"signature_type": "Function",
"target": {
"function": "onSomePackagesChanged",
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 449.0,
"function_hash": "12128848326528096129800347601826553753"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c",
"id": "ASB-A-449392803-e9e10fc5",
"signature_type": "Function",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityUserState.java",
"function": "updateTileServiceMapForAccessibilityServiceLocked"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1080.0,
"function_hash": "107289719469064113582154400370374411210"
},
"source": "https://android.googlesource.com/platform/frameworks/base/+/ad18df8c3cc0d2518adac97bb112e1efcd02a17c",
"id": "ASB-A-449392803-f2c5053d",
"target": {
"file": "services/accessibility/java/com/android/server/accessibility/AccessibilityManagerService.java",
"function": "onPackageUpdateFinished"
},
"signature_type": "Function"
}
],
"severity": "High"
}