ASB-A-477278752

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-477278752.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-477278752
Aliases
  • A-477278752
  • CVE-2026-28655
Published
2026-09-01T00:00:00Z
Modified
2026-09-08T15:39:03Z
Summary
[none]
Details

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
        "https://android.googlesource.com/platform/frameworks/base/+/e1b25527c312b0d87b5399ca383d2864c9767738"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "133016135388923618639507777539297097614",
                "length": 8216
            },
            "id": "ASB-A-477278752-04cf525a",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "createFromProto"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "28811265053569389025803239576793856710",
                "length": 1831
            },
            "id": "ASB-A-477278752-24710e1e",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e1b25527c312b0d87b5399ca383d2864c9767738",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "ReflectionAction"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "9994182176971015894697859990108012656",
                "length": 188
            },
            "id": "ASB-A-477278752-3398d81b",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "getOrPut"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "290894030536038680173581658434561582570",
                "length": 247
            },
            "id": "ASB-A-477278752-3d26f6b5",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "updateAppInfo"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "93107526426490936970039536435828512640",
                "length": 1400
            },
            "id": "ASB-A-477278752-4a494a6e",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "16994374804030412417113506351751959380",
                "length": 1965
            },
            "id": "ASB-A-477278752-61a1b948",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "RemoteViews"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "61885057388053333730884764777919114265",
                "length": 594
            },
            "id": "ASB-A-477278752-63c4def4",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "RemoteViews"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "211388867937786092862421648801551540328",
                "length": 174
            },
            "id": "ASB-A-477278752-764324ea",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "getPackageUserKey"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "215480526812971298458912294331274952020",
                "length": 414
            },
            "id": "ASB-A-477278752-7fc35308",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "configureDescendantsAsChildren"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "300842557745688238745139010439498662086",
                "length": 142
            },
            "id": "ASB-A-477278752-92866ac1",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "RemoteViews"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "246675934437238503542198390557556280727",
                "length": 206
            },
            "id": "ASB-A-477278752-9fbb147b",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "reconstructCaches"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "182735698874485924153288693003848191248",
                "length": 165
            },
            "id": "ASB-A-477278752-a85d3fc0",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "put"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "195392444460684312610748256534289914126",
                "length": 1506
            },
            "id": "ASB-A-477278752-b17ae14a",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "initializeFrom"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "41122785288890201017539615136421695467",
                "length": 1553
            },
            "id": "ASB-A-477278752-c261f010",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e1b25527c312b0d87b5399ca383d2864c9767738",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "45706068184154596497422057449441647733",
                    "34288421074090340415486195951680969266",
                    "132691677925521708371340838472490605877",
                    "243555200852200659624259429292278405497",
                    "333358594507259182192250759060926008255",
                    "210878114736162887112542143554568823942",
                    "221467165133485580168764336048077140134",
                    "229567361479404278790189888633997859641",
                    "20516799536666824827538027540931631223",
                    "50155484699627387418750727798573411133",
                    "76282984792355376613893297803527298189",
                    "272709336408604758703335565021843576855",
                    "264213374478106597857727660132350042100",
                    "44559083173691128873379324379805440281",
                    "242300008183969948410353163122085610161",
                    "339515282661521562043132492323816046229",
                    "237266434337617975795514289636725532749",
                    "115699066067050311541647086173949391569",
                    "143584837489036709155823405178256981293",
                    "97984560058532724262595445657676703425",
                    "242526010061820342322160311566146185145",
                    "175434542422466243708124550707260785761",
                    "339865971547693588623785570788478870679",
                    "313900527699403326325544100601848920973",
                    "286024874467021681862820834927886299629",
                    "6195553047344328696427185526825992272",
                    "261493878870926110525420931669064562738",
                    "249967315934760301066482730310839366593",
                    "238442766971968966115226360615716814659",
                    "336994614320424523387571373108173652781",
                    "227880333627311577505283416329347793129",
                    "17581744783568853142341703959736152328",
                    "150538842112834398349348818379342357971",
                    "189455738464114649769143228228387077707",
                    "235163891129961182492869042852154439929",
                    "76029947795697917936794798080871598815",
                    "215875776630623003184172573489343969111",
                    "290414284822152566247434792003281752799",
                    "335347991110906818201572139070451297746",
                    "281565402210058022114148440452493225869",
                    "12981769804725859054673306545637350317",
                    "183922079179050354628552989025453215172",
                    "92594108993527938633255206972914765016",
                    "56196655077245206227277564284028021761",
                    "56964377574088476945945169728139589750",
                    "232009338613712059013577061159237988253",
                    "197436784067291073009029868493028712790",
                    "259540575007233041531004875097023481224",
                    "63012543932130289792365787898964993822",
                    "206750790741387557517838188636056450962",
                    "188086739728257524809912969183793167602",
                    "102045382742518473330565054201100497545",
                    "239358173999924319972259230881982558400",
                    "76029947795697917936794798080871598815",
                    "215875776630623003184172573489343969111",
                    "275030391631674078432154307888682418105",
                    "180164045361166808129661328867593569418",
                    "257230893125742772324310425161346907365",
                    "152711981547761841261589038474289799279",
                    "278794548285098897925401663277027763961",
                    "48439270846296334156546147660454364416",
                    "112177863004473071407512124756898773746",
                    "338206753223049003291071409699735212936",
                    "30578339488614019209554299949121294730",
                    "25628926214940125135609875228554601661",
                    "278387671002061293086767281516865008226",
                    "158549972946985038737296386049095210064",
                    "256807420261269743276072203261021795808",
                    "132133941422803008232533847464702148330",
                    "191294863300380013711680002882485651085",
                    "72793375391266810690845372304712569222",
                    "231233130773162479499526657123422191375",
                    "286858243241192046855882801564584211815",
                    "329375710359012530959494951844603984294",
                    "182315721745404765336241266193692511074",
                    "229183273115671276216085191073081880987",
                    "52799390131573788041324237545680191358",
                    "213597117324513429497651210987861504947",
                    "63844737244534912443066562037819615101",
                    "155332269106774670269590980004963868050",
                    "128859526950002029293335498845429870638",
                    "109707491683028775918494740833841129478",
                    "11888626443227081776561453442905924777",
                    "102204448422216224612992401556088552755",
                    "213597117324513429497651210987861504947",
                    "80561140726120914370186725960231877825",
                    "326482160082961949250045666999254330325",
                    "251204476440236750988389203419579539389",
                    "213597117324513429497651210987861504947",
                    "319702814868016529939549649101335299012",
                    "281903089860062296326360213136786271286",
                    "190295273850538301357311090820944438436",
                    "120950969442820814535428251115518981351",
                    "233519577490182514671337485531233115862",
                    "266060618645630576413228126793523371826",
                    "188658594545926085851162582198303615910",
                    "72401437723938815105835318884176627087",
                    "243836205219074108617379289202816845363",
                    "253004811884033145152141205228801013755",
                    "35621330040335472974840618016284974870",
                    "168589000047644589744156871523568770182",
                    "160888825392906122658607403493415188395"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-477278752-cc09d9b5",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "308015568079817184504951210535873621027",
                "length": 169
            },
            "id": "ASB-A-477278752-ce7a8406",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "get"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "128138586493073958209375628934733803030",
                    "126262913910327108907945816172295144488",
                    "224642040870067891011100118956000871350",
                    "94721734460418649025892884298377676236",
                    "249266718958006960634618769751124880255",
                    "269017638098793076088849830196790528733",
                    "69245943500149712285359040326905180648",
                    "267625275472435582753883342250653193962",
                    "18144137747627215218611574652915360738",
                    "253109625702311697047675955132271796309",
                    "334944113736809560869531426444317258108",
                    "72956102314976515276802385008512198824",
                    "21718045121734873708841829092236411791",
                    "42057112648843240902778289156372623642",
                    "72478491080702773068581065460247772726",
                    "172160432489537939501764459814330602672",
                    "179703694460839148023968449651424157476",
                    "42569618764431087143726463291897957107",
                    "171548575073215745894904883030801809356",
                    "247168392109118113812846782370913555272",
                    "312627469203136922332660682646419395281",
                    "257815580062109604625558949573997286553"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-477278752-d5303a09",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e1b25527c312b0d87b5399ca383d2864c9767738",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "169688671046148789085904675295219492024",
                "length": 71
            },
            "id": "ASB-A-477278752-eb0a65b2",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "ApplicationInfoCache"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "323246587463465067695711613908437323784",
                "length": 779
            },
            "id": "ASB-A-477278752-f2e2b65d",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "RemoteViews"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-09-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/890b9f6d59596bf68d2a38bdd62ba744cec68a96",
        "https://android.googlesource.com/platform/frameworks/base/+/65c02e08951d30cae42a4b4fbc85db92841bd259"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "128138586493073958209375628934733803030",
                    "126262913910327108907945816172295144488",
                    "224642040870067891011100118956000871350",
                    "8530221144172989364194774583188073606",
                    "250993601811819589332206039483965112839",
                    "269017638098793076088849830196790528733",
                    "69245943500149712285359040326905180648",
                    "267625275472435582753883342250653193962",
                    "18144137747627215218611574652915360738",
                    "253109625702311697047675955132271796309",
                    "334944113736809560869531426444317258108",
                    "72956102314976515276802385008512198824",
                    "21718045121734873708841829092236411791",
                    "42057112648843240902778289156372623642",
                    "72478491080702773068581065460247772726",
                    "172160432489537939501764459814330602672",
                    "179703694460839148023968449651424157476",
                    "42569618764431087143726463291897957107",
                    "191039287901504251887197527785320123829",
                    "268665900857129595276793087195381759410",
                    "151805587998765570618515633777047258887",
                    "257815580062109604625558949573997286553"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-477278752-22bbb64c",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/65c02e08951d30cae42a4b4fbc85db92841bd259",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "300700994597034492807733956073871668159",
                "length": 1363
            },
            "id": "ASB-A-477278752-395c4a93",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/890b9f6d59596bf68d2a38bdd62ba744cec68a96",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "160037494995673571563971230811061810498",
                "length": 1453
            },
            "id": "ASB-A-477278752-7c5f3389",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/65c02e08951d30cae42a4b4fbc85db92841bd259",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "ReflectionAction"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "300700994597034492807733956073871668159",
                "length": 1363
            },
            "id": "ASB-A-477278752-989f524f",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/65c02e08951d30cae42a4b4fbc85db92841bd259",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/40147347c435a976eccdf6f615a321bdc9a9db1d",
        "https://android.googlesource.com/platform/frameworks/base/+/129adfab49a4db739245796fd731d6cda4e33d69"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "300700994597034492807733956073871668159",
                "length": 1363
            },
            "id": "ASB-A-477278752-0575806f",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/129adfab49a4db739245796fd731d6cda4e33d69",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "160037494995673571563971230811061810498",
                "length": 1453
            },
            "id": "ASB-A-477278752-3b93563d",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/129adfab49a4db739245796fd731d6cda4e33d69",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "ReflectionAction"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "128138586493073958209375628934733803030",
                    "126262913910327108907945816172295144488",
                    "224642040870067891011100118956000871350",
                    "8530221144172989364194774583188073606",
                    "250993601811819589332206039483965112839",
                    "269017638098793076088849830196790528733",
                    "69245943500149712285359040326905180648",
                    "267625275472435582753883342250653193962",
                    "18144137747627215218611574652915360738",
                    "253109625702311697047675955132271796309",
                    "334944113736809560869531426444317258108",
                    "72956102314976515276802385008512198824",
                    "21718045121734873708841829092236411791",
                    "42057112648843240902778289156372623642",
                    "72478491080702773068581065460247772726",
                    "172160432489537939501764459814330602672",
                    "179703694460839148023968449651424157476",
                    "42569618764431087143726463291897957107",
                    "191039287901504251887197527785320123829",
                    "268665900857129595276793087195381759410",
                    "151805587998765570618515633777047258887",
                    "257815580062109604625558949573997286553"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-477278752-bbb99290",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/129adfab49a4db739245796fd731d6cda4e33d69",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "300700994597034492807733956073871668159",
                "length": 1363
            },
            "id": "ASB-A-477278752-e627db78",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/40147347c435a976eccdf6f615a321bdc9a9db1d",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/97fc79625669cf9812f561894bd1cfbe4fede37b",
        "https://android.googlesource.com/platform/frameworks/base/+/232a890e165e122a08640171191443df80c0adcd"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "300700994597034492807733956073871668159",
                "length": 1363
            },
            "id": "ASB-A-477278752-16a49af4",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/97fc79625669cf9812f561894bd1cfbe4fede37b",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "151855120793481359579798430456286318125",
                "length": 1781
            },
            "id": "ASB-A-477278752-d148eaf3",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/232a890e165e122a08640171191443df80c0adcd",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "ReflectionAction"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "300700994597034492807733956073871668159",
                "length": 1363
            },
            "id": "ASB-A-477278752-d42f56e3",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/232a890e165e122a08640171191443df80c0adcd",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "128138586493073958209375628934733803030",
                    "126262913910327108907945816172295144488",
                    "224642040870067891011100118956000871350",
                    "94721734460418649025892884298377676236",
                    "250993601811819589332206039483965112839",
                    "269017638098793076088849830196790528733",
                    "69245943500149712285359040326905180648",
                    "267625275472435582753883342250653193962",
                    "18144137747627215218611574652915360738",
                    "253109625702311697047675955132271796309",
                    "334944113736809560869531426444317258108",
                    "72956102314976515276802385008512198824",
                    "21718045121734873708841829092236411791",
                    "42057112648843240902778289156372623642",
                    "72478491080702773068581065460247772726",
                    "172160432489537939501764459814330602672",
                    "179703694460839148023968449651424157476",
                    "42569618764431087143726463291897957107",
                    "191039287901504251887197527785320123829",
                    "268665900857129595276793087195381759410",
                    "151805587998765570618515633777047258887",
                    "257815580062109604625558949573997286553"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-477278752-d74b7ed8",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/232a890e165e122a08640171191443df80c0adcd",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/e2334114e44621d41f9146650bf43f0f958dc73b",
        "https://android.googlesource.com/platform/frameworks/base/+/541207a855445c51731b0b3d4f2cd1f353718e29"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "129039350590260289882958091473674898445",
                "length": 1403
            },
            "id": "ASB-A-477278752-440bdf2c",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/e2334114e44621d41f9146650bf43f0f958dc73b",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "129039350590260289882958091473674898445",
                "length": 1403
            },
            "id": "ASB-A-477278752-a1793562",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/541207a855445c51731b0b3d4f2cd1f353718e29",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "145671044534187952202694961112066660869",
                "length": 1909
            },
            "id": "ASB-A-477278752-a93be364",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/541207a855445c51731b0b3d4f2cd1f353718e29",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "ReflectionAction"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "128138586493073958209375628934733803030",
                    "126262913910327108907945816172295144488",
                    "224642040870067891011100118956000871350",
                    "94721734460418649025892884298377676236",
                    "250993601811819589332206039483965112839",
                    "269017638098793076088849830196790528733",
                    "69245943500149712285359040326905180648",
                    "267625275472435582753883342250653193962",
                    "18144137747627215218611574652915360738",
                    "253109625702311697047675955132271796309",
                    "334944113736809560869531426444317258108",
                    "72956102314976515276802385008512198824",
                    "21718045121734873708841829092236411791",
                    "42057112648843240902778289156372623642",
                    "72478491080702773068581065460247772726",
                    "172160432489537939501764459814330602672",
                    "179703694460839148023968449651424157476",
                    "42569618764431087143726463291897957107",
                    "171548575073215745894904883030801809356",
                    "247168392109118113812846782370913555272",
                    "312627469203136922332660682646419395281",
                    "257815580062109604625558949573997286553"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-477278752-dffea4cf",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/541207a855445c51731b0b3d4f2cd1f353718e29",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-09-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/2c753818dfa18fd847de6ad26d800428af278ea4",
        "https://android.googlesource.com/platform/frameworks/base/+/39aebc2b4d0db908d69d0b29db8c1de128ce4024"
    ],
    "severity": "High",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "93955558209114313342486193879673654825",
                "length": 1126
            },
            "id": "ASB-A-477278752-3ee204f0",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/39aebc2b4d0db908d69d0b29db8c1de128ce4024",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "110424317728633629565652377787236476145",
                "length": 1434
            },
            "id": "ASB-A-477278752-560e2ebf",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/39aebc2b4d0db908d69d0b29db8c1de128ce4024",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "ReflectionAction"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "93955558209114313342486193879673654825",
                "length": 1126
            },
            "id": "ASB-A-477278752-5b13ceab",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/2c753818dfa18fd847de6ad26d800428af278ea4",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java",
                "function": "writeToParcel"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "128138586493073958209375628934733803030",
                    "126262913910327108907945816172295144488",
                    "224642040870067891011100118956000871350",
                    "94721734460418649025892884298377676236",
                    "296161585610253572246860138523111644933",
                    "158464457046680647782034229608928793109",
                    "257895402680487192173951587995035736995",
                    "52762253531256118014137928933658002302",
                    "242323302671254103627412044965862746046",
                    "222964114232531009539848300168084439773",
                    "143324830497973991353926923118850890297",
                    "110078544195058360376782453073086792957",
                    "21718045121734873708841829092236411791",
                    "97347667912144166006291858894011316411",
                    "169003295000946315034024455279781068759",
                    "244542897262979696324335739203538280874",
                    "153020967136070374944688560251840237892",
                    "42569618764431087143726463291897957107",
                    "256380228068856430227416808587175489432",
                    "20621123783485292462207528266559778238",
                    "195074496352544740381425056045422489435",
                    "257815580062109604625558949573997286553"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-477278752-66c8440e",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/39aebc2b4d0db908d69d0b29db8c1de128ce4024",
            "target": {
                "file": "core/java/android/widget/RemoteViews.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"