ASB-A-451602444

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-451602444.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-451602444
Aliases
  • A-451602444
  • CVE-2026-49924
Published
2026-11-01T00:00:00Z
Modified
2026-11-02T17:11:23Z
Summary
[none]
Details

In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-qpr2-next:0
Fixed
17-qpr2-next:2026-11-01

Affected versions

Other
17-qpr2-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb",
        "https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b",
        "https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "103018159512582308872258870356973652294",
                "length":  4451
            },
            "id":  "ASB-A-451602444-0b227957",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java",
                "function":  "testShortcutInfoMissingMandatoryFields"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "28750293430185058674802037971294379389",
                "length":  932
            },
            "id":  "ASB-A-451602444-106a89bb",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "pushDynamicShortcut"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "114175057358879051190754868453971055375",
                "length":  1044
            },
            "id":  "ASB-A-451602444-10d20deb",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java",
                "function":  "ShortcutInfo"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "228953785868648991940060316848552532689",
                "length":  1023
            },
            "id":  "ASB-A-451602444-10fbe25c",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "addDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "186036941398439304080636130797669982314",
                "length":  1722
            },
            "id":  "ASB-A-451602444-111eb0f4",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "updateShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "97091192253155090159680690690253751681",
                    "287521650325813515300594181366167863772",
                    "193132984190381195312198466348957792770",
                    "177481907760786459296346074876088483190"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-1aab7b0e",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "28750293430185058674802037971294379389",
                "length":  932
            },
            "id":  "ASB-A-451602444-24437df1",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "pushDynamicShortcut"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "330490457430214538118530996202957464749",
                "length":  391
            },
            "id":  "ASB-A-451602444-263fcf80",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "validateShortcutSize"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "336916740595853484794434492210072219840",
                    "21594790408101240774495751146134241496",
                    "128284451650090394194218246261020629737",
                    "299357168606543631513449318544128626148",
                    "323361789254308862404973638443262443473",
                    "267946729309153649786716065316753413522",
                    "336421579970259556127966568279106477320",
                    "256175067828422207185479545689024785568",
                    "272775078542805382455308614733401320132",
                    "102792364210649161439142880292239661121",
                    "182876723559962202617446026477368357808",
                    "124984314299000142035825172815742487109",
                    "187686037100948270343813786846529257275",
                    "154879719381060605120578332303457577267",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "154879719381060605120578332303457577267",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "42878899071815562444310277103980723863",
                    "154879719381060605120578332303457577267",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "65120479012864077420843313853585103656",
                    "51946388225474194777575662700645753175",
                    "197315576188323493713262946785415900653",
                    "257327764504468156481512776832539524498"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-2ffbf0e6",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "237901262931818598654165269404324731276",
                    "188665387038877244831902310914647169529",
                    "293030020031976047340834094438576543426",
                    "174068398987877512796358893514460170855",
                    "295437594364688430501389381974127258714",
                    "155544016385942242631721087576116245716",
                    "20666050734034983287765684298196125765",
                    "37990182455935330603233466065693768892",
                    "235044486346499461438481269355907735371",
                    "45126384062079443228524172241608301811",
                    "96201268035272855790580296819035371538",
                    "327861511168087302278812803253482291792",
                    "70953044295502323201936215352972950723",
                    "144763058216460005334686430221170381371",
                    "33620401118033557648716849166454018115",
                    "121027698625792230510042634182204020286",
                    "68729634454569226571668511358280742495",
                    "260507672820537349360996701794639939462",
                    "329685979369148743237431526927675348784"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-32ec80ea",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "339601222863008298004896354620578186100",
                "length":  1004
            },
            "id":  "ASB-A-451602444-36da22de",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "addDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "71412220942630048063950836074130040710",
                "length":  1703
            },
            "id":  "ASB-A-451602444-41e8c656",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "updateShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "227901665204587025000686993088593042017",
                "length":  260
            },
            "id":  "ASB-A-451602444-5ac5a843",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "validateShortcutSizes"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "94567466273624967033616009761319529129",
                "length":  1262
            },
            "id":  "ASB-A-451602444-72fbba4e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "setDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "270393854182748939625158789241805271849",
                "length":  953
            },
            "id":  "ASB-A-451602444-7c89d3bf",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "pushDynamicShortcut"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "94567466273624967033616009761319529129",
                "length":  1262
            },
            "id":  "ASB-A-451602444-8b89269a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "setDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "71412220942630048063950836074130040710",
                "length":  1703
            },
            "id":  "ASB-A-451602444-a09a6fe9",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "updateShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "157646904884070008700377512924801074702",
                "length":  143
            },
            "id":  "ASB-A-451602444-b379b8e2",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "validateShortcutSize"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "168938080459532994748353839331824475494",
                "length":  1281
            },
            "id":  "ASB-A-451602444-cd9110b7",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "setDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "100618827025222456214751250299302262147",
                    "286530393883377075119530082321081462879",
                    "133588259433069124176881219414664279811",
                    "159054121081670191455971045531408269899",
                    "285409131900921830757293120523161888598",
                    "157039079928944337592054572547956496949",
                    "22738083221792164449155068249630837209",
                    "34811939372867685117369411304260014850",
                    "323361789254308862404973638443262443473",
                    "267946729309153649786716065316753413522",
                    "336421579970259556127966568279106477320",
                    "49379818860543610095124811669222887346",
                    "286690564095318448724667662454797823606",
                    "186203593297633018793551255909599452045",
                    "10928554456528628724849569667322868797",
                    "2718798138870330089531583893679522253",
                    "21220389763846704822803287709106205400",
                    "182876723559962202617446026477368357808",
                    "124984314299000142035825172815742487109",
                    "187686037100948270343813786846529257275",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "255520439221415030304095898816845586601",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "42878899071815562444310277103980723863",
                    "321929901381648741112357344339524583280",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "88335566478888113100730872026267879093",
                    "51946388225474194777575662700645753175",
                    "197315576188323493713262946785415900653",
                    "257327764504468156481512776832539524498",
                    "18290083798357938132127413292799758667"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-f0c8fb5d",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "339601222863008298004896354620578186100",
                "length":  1004
            },
            "id":  "ASB-A-451602444-f341c015",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "addDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "44405926164414503192084927431512153483",
                    "73202613135253157574059196717318340133",
                    "122167814141206288150958299547817999390",
                    "176928125621801936187774279080062910073",
                    "322599985930554494454927287007178773133",
                    "168994455637200040229000210232617296035",
                    "53266723288218393473645268090686492284",
                    "137927480048053744885256671744474823113",
                    "105688116268553433994864201142467111117",
                    "309285280475492546658054702865686837097",
                    "39514571796303988645577690689526005488",
                    "181552557333642009193007209191113011976",
                    "200230581385119980691022524891581658190",
                    "24878551406797363143072882735845173059",
                    "9704609004820645892396460101806803745",
                    "49693357618112692414869492575969841541",
                    "105427887079565036822247400785116675653",
                    "104286463096465087049312105096850732715",
                    "185461472639915053459245035017216456300",
                    "64023080197095620882668474144496717940",
                    "272775078542805382455308614733401320132",
                    "102792364210649161439142880292239661121",
                    "63141562171763322478800604793352934238",
                    "50998681473702837697825569607044621531",
                    "66544120841341846504531158514793645211",
                    "68638600120929848654051351125053166048",
                    "225841469021538359120828311401160908345",
                    "193556402113540194802929281064100945689",
                    "81263628489069249796488531101893729361",
                    "185461472639915053459245035017216456300",
                    "91854003919610908140064292593648277183",
                    "139141714570976558405613396746328921034",
                    "7837566960675798085608326395255348182",
                    "148582332128900279170251298737550662511",
                    "2298346726206255872767168123200929481",
                    "245207774769982457103116805732430923745",
                    "72248465885943195943265694122030866987",
                    "62743994008029875967557052228074179800",
                    "176496848323231487834229061326242633330",
                    "60650917780212746428832255148675169484",
                    "310828251791335430773171425387740346847",
                    "332253565430931152421723757225087732412",
                    "194993172026741416427082180164648584752",
                    "194829885017046164417090838433564128606",
                    "66601450387102351477680977223157805803",
                    "187686037100948270343813786846529257275",
                    "194744495858166621079695193580827518066",
                    "182613337507084301170034882134267966999",
                    "313819311837287173201563004960537993486",
                    "229846811245001283162204352868400334425",
                    "194744495858166621079695193580827518066",
                    "182613337507084301170034882134267966999",
                    "313819311837287173201563004960537993486",
                    "208825130403199421625512660796325659286",
                    "194744495858166621079695193580827518066",
                    "182613337507084301170034882134267966999",
                    "313819311837287173201563004960537993486",
                    "229846811245001283162204352868400334425",
                    "72317996232012219745986339676090739942",
                    "152059497658556795823540810024303095395",
                    "197882789744934589903073205891598759015",
                    "254530068836766894850300107498387948954"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-ff49ef74",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-11-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "318983710540196843273684549113788618325",
                "length":  1209
            },
            "id":  "ASB-A-451602444-16ecc483",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "setDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "34293032210490228558487340659867651131",
                "length":  951
            },
            "id":  "ASB-A-451602444-27d79310",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "addDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "103018159512582308872258870356973652294",
                "length":  4451
            },
            "id":  "ASB-A-451602444-2f4662c4",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java",
                "function":  "testShortcutInfoMissingMandatoryFields"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "100618827025222456214751250299302262147",
                    "286530393883377075119530082321081462879",
                    "133588259433069124176881219414664279811",
                    "159054121081670191455971045531408269899",
                    "285409131900921830757293120523161888598",
                    "157039079928944337592054572547956496949",
                    "22738083221792164449155068249630837209",
                    "34811939372867685117369411304260014850",
                    "323361789254308862404973638443262443473",
                    "312829556133467067674456375116940128058",
                    "330115838233315093872204878226476076920",
                    "49379818860543610095124811669222887346",
                    "286690564095318448724667662454797823606",
                    "186203593297633018793551255909599452045",
                    "10928554456528628724849569667322868797",
                    "2718798138870330089531583893679522253",
                    "21220389763846704822803287709106205400",
                    "182876723559962202617446026477368357808",
                    "124984314299000142035825172815742487109",
                    "187686037100948270343813786846529257275",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "255520439221415030304095898816845586601",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "42878899071815562444310277103980723863",
                    "321929901381648741112357344339524583280",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "88335566478888113100730872026267879093",
                    "51946388225474194777575662700645753175",
                    "183373815776437101437553035022405862300",
                    "325515252994056304881639932539807854245",
                    "222405467365552367942807604002764112303"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-45d1869f",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "71412220942630048063950836074130040710",
                "length":  1703
            },
            "id":  "ASB-A-451602444-8ba54708",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "updateShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "97091192253155090159680690690253751681",
                    "287521650325813515300594181366167863772",
                    "193132984190381195312198466348957792770",
                    "177481907760786459296346074876088483190"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-c90b917e",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "114175057358879051190754868453971055375",
                "length":  1044
            },
            "id":  "ASB-A-451602444-d7298c87",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java",
                "function":  "ShortcutInfo"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "171965400896051859916858482205845146818",
                "length":  885
            },
            "id":  "ASB-A-451602444-ee8bc1e4",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "pushDynamicShortcut"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "237901262931818598654165269404324731276",
                    "188665387038877244831902310914647169529",
                    "293030020031976047340834094438576543426",
                    "174068398987877512796358893514460170855",
                    "295437594364688430501389381974127258714",
                    "155544016385942242631721087576116245716",
                    "20666050734034983287765684298196125765",
                    "37990182455935330603233466065693768892",
                    "235044486346499461438481269355907735371",
                    "45126384062079443228524172241608301811",
                    "96201268035272855790580296819035371538",
                    "327861511168087302278812803253482291792",
                    "70953044295502323201936215352972950723",
                    "144763058216460005334686430221170381371",
                    "33620401118033557648716849166454018115",
                    "100603917343991467486286750332286447268",
                    "111922013453599462532259127514077874744",
                    "228469783096861006051920247900687388770"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-f7ad9a39",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-11-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "71412220942630048063950836074130040710",
                "length":  1703
            },
            "id":  "ASB-A-451602444-0e5a8a60",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "updateShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "97091192253155090159680690690253751681",
                    "287521650325813515300594181366167863772",
                    "193132984190381195312198466348957792770",
                    "177481907760786459296346074876088483190"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-3de55d2c",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "103018159512582308872258870356973652294",
                "length":  4451
            },
            "id":  "ASB-A-451602444-54a1b961",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java",
                "function":  "testShortcutInfoMissingMandatoryFields"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "171965400896051859916858482205845146818",
                "length":  885
            },
            "id":  "ASB-A-451602444-5d05306c",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "pushDynamicShortcut"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "318983710540196843273684549113788618325",
                "length":  1209
            },
            "id":  "ASB-A-451602444-72a6b198",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "setDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "114175057358879051190754868453971055375",
                "length":  1044
            },
            "id":  "ASB-A-451602444-8689c631",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java",
                "function":  "ShortcutInfo"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "237901262931818598654165269404324731276",
                    "188665387038877244831902310914647169529",
                    "293030020031976047340834094438576543426",
                    "174068398987877512796358893514460170855",
                    "295437594364688430501389381974127258714",
                    "155544016385942242631721087576116245716",
                    "20666050734034983287765684298196125765",
                    "37990182455935330603233466065693768892",
                    "235044486346499461438481269355907735371",
                    "45126384062079443228524172241608301811",
                    "96201268035272855790580296819035371538",
                    "327861511168087302278812803253482291792",
                    "70953044295502323201936215352972950723",
                    "144763058216460005334686430221170381371",
                    "33620401118033557648716849166454018115",
                    "100603917343991467486286750332286447268",
                    "111922013453599462532259127514077874744",
                    "228469783096861006051920247900687388770"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-c480fe62",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "100618827025222456214751250299302262147",
                    "286530393883377075119530082321081462879",
                    "133588259433069124176881219414664279811",
                    "159054121081670191455971045531408269899",
                    "285409131900921830757293120523161888598",
                    "157039079928944337592054572547956496949",
                    "22738083221792164449155068249630837209",
                    "34811939372867685117369411304260014850",
                    "323361789254308862404973638443262443473",
                    "267946729309153649786716065316753413522",
                    "336421579970259556127966568279106477320",
                    "49379818860543610095124811669222887346",
                    "286690564095318448724667662454797823606",
                    "186203593297633018793551255909599452045",
                    "10928554456528628724849569667322868797",
                    "2718798138870330089531583893679522253",
                    "21220389763846704822803287709106205400",
                    "182876723559962202617446026477368357808",
                    "124984314299000142035825172815742487109",
                    "187686037100948270343813786846529257275",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "255520439221415030304095898816845586601",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "42878899071815562444310277103980723863",
                    "321929901381648741112357344339524583280",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "88335566478888113100730872026267879093",
                    "51946388225474194777575662700645753175",
                    "183373815776437101437553035022405862300",
                    "325515252994056304881639932539807854245",
                    "222405467365552367942807604002764112303"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-dce5758c",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "34293032210490228558487340659867651131",
                "length":  951
            },
            "id":  "ASB-A-451602444-fb886282",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "addDynamicShortcuts"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-11-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "100618827025222456214751250299302262147",
                    "286530393883377075119530082321081462879",
                    "133588259433069124176881219414664279811",
                    "159054121081670191455971045531408269899",
                    "285409131900921830757293120523161888598",
                    "157039079928944337592054572547956496949",
                    "22738083221792164449155068249630837209",
                    "34811939372867685117369411304260014850",
                    "323361789254308862404973638443262443473",
                    "267946729309153649786716065316753413522",
                    "336421579970259556127966568279106477320",
                    "49379818860543610095124811669222887346",
                    "286690564095318448724667662454797823606",
                    "186203593297633018793551255909599452045",
                    "10928554456528628724849569667322868797",
                    "2718798138870330089531583893679522253",
                    "21220389763846704822803287709106205400",
                    "182876723559962202617446026477368357808",
                    "124984314299000142035825172815742487109",
                    "187686037100948270343813786846529257275",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "255520439221415030304095898816845586601",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "42878899071815562444310277103980723863",
                    "321929901381648741112357344339524583280",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "88335566478888113100730872026267879093",
                    "51946388225474194777575662700645753175",
                    "183373815776437101437553035022405862300",
                    "325515252994056304881639932539807854245",
                    "222405467365552367942807604002764112303"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-0c743c8c",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "114175057358879051190754868453971055375",
                "length":  1044
            },
            "id":  "ASB-A-451602444-0e6e227f",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java",
                "function":  "ShortcutInfo"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "103018159512582308872258870356973652294",
                "length":  4451
            },
            "id":  "ASB-A-451602444-18bfda5b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java",
                "function":  "testShortcutInfoMissingMandatoryFields"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "71412220942630048063950836074130040710",
                "length":  1703
            },
            "id":  "ASB-A-451602444-3402ed34",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "updateShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "237901262931818598654165269404324731276",
                    "188665387038877244831902310914647169529",
                    "293030020031976047340834094438576543426",
                    "174068398987877512796358893514460170855",
                    "295437594364688430501389381974127258714",
                    "155544016385942242631721087576116245716",
                    "20666050734034983287765684298196125765",
                    "37990182455935330603233466065693768892",
                    "235044486346499461438481269355907735371",
                    "45126384062079443228524172241608301811",
                    "96201268035272855790580296819035371538",
                    "327861511168087302278812803253482291792",
                    "70953044295502323201936215352972950723",
                    "144763058216460005334686430221170381371",
                    "33620401118033557648716849166454018115",
                    "100603917343991467486286750332286447268",
                    "111922013453599462532259127514077874744",
                    "228469783096861006051920247900687388770"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-9f3e8680",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "97091192253155090159680690690253751681",
                    "287521650325813515300594181366167863772",
                    "193132984190381195312198466348957792770",
                    "177481907760786459296346074876088483190"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-bc1bfed7",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "171965400896051859916858482205845146818",
                "length":  885
            },
            "id":  "ASB-A-451602444-c3b8813a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "pushDynamicShortcut"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "34293032210490228558487340659867651131",
                "length":  951
            },
            "id":  "ASB-A-451602444-d16f53ab",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "addDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "318983710540196843273684549113788618325",
                "length":  1209
            },
            "id":  "ASB-A-451602444-d27e1993",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "setDynamicShortcuts"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-11-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "100618827025222456214751250299302262147",
                    "286530393883377075119530082321081462879",
                    "133588259433069124176881219414664279811",
                    "159054121081670191455971045531408269899",
                    "285409131900921830757293120523161888598",
                    "157039079928944337592054572547956496949",
                    "22738083221792164449155068249630837209",
                    "34811939372867685117369411304260014850",
                    "323361789254308862404973638443262443473",
                    "267946729309153649786716065316753413522",
                    "336421579970259556127966568279106477320",
                    "49379818860543610095124811669222887346",
                    "286690564095318448724667662454797823606",
                    "186203593297633018793551255909599452045",
                    "10928554456528628724849569667322868797",
                    "2718798138870330089531583893679522253",
                    "21220389763846704822803287709106205400",
                    "182876723559962202617446026477368357808",
                    "124984314299000142035825172815742487109",
                    "187686037100948270343813786846529257275",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "255520439221415030304095898816845586601",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "42878899071815562444310277103980723863",
                    "321929901381648741112357344339524583280",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "88335566478888113100730872026267879093",
                    "51946388225474194777575662700645753175",
                    "197315576188323493713262946785415900653",
                    "257327764504468156481512776832539524498",
                    "18290083798357938132127413292799758667"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-08c13928",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "97091192253155090159680690690253751681",
                    "287521650325813515300594181366167863772",
                    "193132984190381195312198466348957792770",
                    "177481907760786459296346074876088483190"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-490ae99a",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "103018159512582308872258870356973652294",
                "length":  4451
            },
            "id":  "ASB-A-451602444-4964a96e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java",
                "function":  "testShortcutInfoMissingMandatoryFields"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "339601222863008298004896354620578186100",
                "length":  1004
            },
            "id":  "ASB-A-451602444-964d36c3",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "addDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "114175057358879051190754868453971055375",
                "length":  1044
            },
            "id":  "ASB-A-451602444-b6c0cfa0",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java",
                "function":  "ShortcutInfo"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "94567466273624967033616009761319529129",
                "length":  1262
            },
            "id":  "ASB-A-451602444-b9b96a7e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "setDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "28750293430185058674802037971294379389",
                "length":  932
            },
            "id":  "ASB-A-451602444-d7da69cd",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "pushDynamicShortcut"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "237901262931818598654165269404324731276",
                    "188665387038877244831902310914647169529",
                    "293030020031976047340834094438576543426",
                    "174068398987877512796358893514460170855",
                    "295437594364688430501389381974127258714",
                    "155544016385942242631721087576116245716",
                    "20666050734034983287765684298196125765",
                    "37990182455935330603233466065693768892",
                    "235044486346499461438481269355907735371",
                    "45126384062079443228524172241608301811",
                    "96201268035272855790580296819035371538",
                    "327861511168087302278812803253482291792",
                    "70953044295502323201936215352972950723",
                    "144763058216460005334686430221170381371",
                    "33620401118033557648716849166454018115",
                    "100603917343991467486286750332286447268",
                    "111922013453599462532259127514077874744",
                    "228469783096861006051920247900687388770"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-e6299949",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "71412220942630048063950836074130040710",
                "length":  1703
            },
            "id":  "ASB-A-451602444-fcdbc3cd",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "updateShortcuts"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-11-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5"
    ],
    "severity":  "High",
    "spl":  "2026-11-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "100618827025222456214751250299302262147",
                    "286530393883377075119530082321081462879",
                    "133588259433069124176881219414664279811",
                    "159054121081670191455971045531408269899",
                    "40250614945690976328714534111887374960",
                    "157039079928944337592054572547956496949",
                    "22738083221792164449155068249630837209",
                    "34811939372867685117369411304260014850",
                    "323361789254308862404973638443262443473",
                    "322835205800953069906274331529097190221",
                    "131858856584697455465792215535198040585",
                    "49379818860543610095124811669222887346",
                    "286690564095318448724667662454797823606",
                    "186203593297633018793551255909599452045",
                    "10928554456528628724849569667322868797",
                    "2718798138870330089531583893679522253",
                    "21220389763846704822803287709106205400",
                    "182876723559962202617446026477368357808",
                    "124984314299000142035825172815742487109",
                    "187686037100948270343813786846529257275",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "255520439221415030304095898816845586601",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "42878899071815562444310277103980723863",
                    "321929901381648741112357344339524583280",
                    "220009168948288049530746349607475027773",
                    "283841965564621843934980190153004253387",
                    "154274304223043419759079054996356482577",
                    "88335566478888113100730872026267879093",
                    "51946388225474194777575662700645753175",
                    "183373815776437101437553035022405862300",
                    "325515252994056304881639932539807854245",
                    "222405467365552367942807604002764112303"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-31369226",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "237901262931818598654165269404324731276",
                    "188665387038877244831902310914647169529",
                    "293030020031976047340834094438576543426",
                    "174068398987877512796358893514460170855",
                    "295437594364688430501389381974127258714",
                    "155544016385942242631721087576116245716",
                    "20666050734034983287765684298196125765",
                    "37990182455935330603233466065693768892",
                    "235044486346499461438481269355907735371",
                    "45126384062079443228524172241608301811",
                    "96201268035272855790580296819035371538",
                    "327861511168087302278812803253482291792",
                    "70953044295502323201936215352972950723",
                    "144763058216460005334686430221170381371",
                    "33620401118033557648716849166454018115",
                    "100603917343991467486286750332286447268",
                    "111922013453599462532259127514077874744",
                    "228469783096861006051920247900687388770"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-39dd9d2e",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "97091192253155090159680690690253751681",
                    "287521650325813515300594181366167863772",
                    "193132984190381195312198466348957792770",
                    "177481907760786459296346074876088483190"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-451602444-3aebe498",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "114175057358879051190754868453971055375",
                "length":  1044
            },
            "id":  "ASB-A-451602444-796164ab",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5",
            "target":  {
                "file":  "core/java/android/content/pm/ShortcutInfo.java",
                "function":  "ShortcutInfo"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "321829752434666575755124052290594794159",
                "length":  1202
            },
            "id":  "ASB-A-451602444-9342d4d6",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "setDynamicShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "72053831430762407432456560612262857770",
                "length":  878
            },
            "id":  "ASB-A-451602444-e7d45f14",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "pushDynamicShortcut"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "103018159512582308872258870356973652294",
                "length":  4451
            },
            "id":  "ASB-A-451602444-ecb20d01",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5",
            "target":  {
                "file":  "services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java",
                "function":  "testShortcutInfoMissingMandatoryFields"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "32989098233992377005863261440417470795",
                "length":  1696
            },
            "id":  "ASB-A-451602444-f87dfa8d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "updateShortcuts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "78155714901215305587265594459312803586",
                "length":  944
            },
            "id":  "ASB-A-451602444-ffbe7625",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5",
            "target":  {
                "file":  "services/core/java/com/android/server/pm/ShortcutService.java",
                "function":  "addDynamicShortcuts"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"