In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/d3a1cc8820b17b04723df14b9e5df02473f440d6"
],
"severity": "High",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"20982447598958631382731828939379110873",
"100646987225916062867589442827492674535",
"299840733928824278291399390362936302801",
"168531452746523633564007518218141505047"
],
"threshold": 0.9
},
"id": "ASB-A-480975165-2b3cdc80",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/d3a1cc8820b17b04723df14b9e5df02473f440d6",
"target": {
"file": "services/core/java/com/android/server/app/GameManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "98306407619870254031970706705374646960",
"length": 1636
},
"id": "ASB-A-480975165-2f658f72",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/d3a1cc8820b17b04723df14b9e5df02473f440d6",
"target": {
"file": "services/core/java/com/android/server/app/GameManagerService.java",
"function": "parseInterventionFromXml"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/81c0a9160662f5f03a3a81236611449b6b038c90"
],
"severity": "High",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "98306407619870254031970706705374646960",
"length": 1636
},
"id": "ASB-A-480975165-a36a5b12",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/81c0a9160662f5f03a3a81236611449b6b038c90",
"target": {
"file": "services/core/java/com/android/server/app/GameManagerService.java",
"function": "parseInterventionFromXml"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"20982447598958631382731828939379110873",
"100646987225916062867589442827492674535",
"299840733928824278291399390362936302801",
"168531452746523633564007518218141505047"
],
"threshold": 0.9
},
"id": "ASB-A-480975165-f949e285",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/81c0a9160662f5f03a3a81236611449b6b038c90",
"target": {
"file": "services/core/java/com/android/server/app/GameManagerService.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/49a60b644920cdf7b513b8fffe3904f1b154f916"
],
"severity": "High",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"20982447598958631382731828939379110873",
"100646987225916062867589442827492674535",
"299840733928824278291399390362936302801",
"168531452746523633564007518218141505047"
],
"threshold": 0.9
},
"id": "ASB-A-480975165-17b1c27f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/49a60b644920cdf7b513b8fffe3904f1b154f916",
"target": {
"file": "services/core/java/com/android/server/app/GameManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "98306407619870254031970706705374646960",
"length": 1636
},
"id": "ASB-A-480975165-ecf2dc0c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/49a60b644920cdf7b513b8fffe3904f1b154f916",
"target": {
"file": "services/core/java/com/android/server/app/GameManagerService.java",
"function": "parseInterventionFromXml"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/7531bc2726579c3180447af102d1e4217bdcc41b"
],
"severity": "High",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "98306407619870254031970706705374646960",
"length": 1636
},
"id": "ASB-A-480975165-9d1ac5ce",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7531bc2726579c3180447af102d1e4217bdcc41b",
"target": {
"file": "services/core/java/com/android/server/app/GameManagerService.java",
"function": "parseInterventionFromXml"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"20982447598958631382731828939379110873",
"100646987225916062867589442827492674535",
"299840733928824278291399390362936302801",
"168531452746523633564007518218141505047"
],
"threshold": 0.9
},
"id": "ASB-A-480975165-ca6670ba",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7531bc2726579c3180447af102d1e4217bdcc41b",
"target": {
"file": "services/core/java/com/android/server/app/GameManagerService.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/98f4d6d74c24280ff10125ad4ca34dd118f7f697"
],
"severity": "High",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"20982447598958631382731828939379110873",
"100646987225916062867589442827492674535",
"299840733928824278291399390362936302801",
"168531452746523633564007518218141505047"
],
"threshold": 0.9
},
"id": "ASB-A-480975165-10d1b8b2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/98f4d6d74c24280ff10125ad4ca34dd118f7f697",
"target": {
"file": "services/core/java/com/android/server/app/GameManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "98306407619870254031970706705374646960",
"length": 1636
},
"id": "ASB-A-480975165-7289e9bc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/98f4d6d74c24280ff10125ad4ca34dd118f7f697",
"target": {
"file": "services/core/java/com/android/server/app/GameManagerService.java",
"function": "parseInterventionFromXml"
}
}
]
}