ASB-A-483693973

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-483693973.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-483693973
Aliases
  • A-483693973
  • CVE-2026-21352
Published
2026-06-01T00:00:00Z
Modified
2026-06-08T15:01:31.246215948Z
Summary
[none]
Details

In multiple locations, there is a possible way to achieve arbitrary code execution due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/external/dng_sdk

Package

Name
platform/external/dng_sdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-06-01

Affected versions

Other
17-next

Ecosystem specific

{
    "spl": "2026-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
    ],
    "severity": "Critical",
    "vanir_signatures": [
        {
            "target": {
                "function": "dng_opcode_MapTable::ReplicateLastEntry",
                "file": "source/dng_misc_opcodes.cpp"
            },
            "digest": {
                "function_hash": "210822508803230862640516477016906542278",
                "length": 204.0
            },
            "id": "ASB-A-483693973-0c61cf0a",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "target": {
                "function": "dng_ref_counted_block::Allocate",
                "file": "source/dng_ref_counted_block.cpp"
            },
            "id": "ASB-A-483693973-1025e0a4",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "function_hash": "195248502907256290292332962174144833088",
                "length": 211.0
            }
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "target": {
                "file": "source/dng_ref_counted_block.cpp"
            },
            "id": "ASB-A-483693973-30428f10",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "284850060203403678783638611959678025405",
                    "105726039794551679729672699644156795467",
                    "94803612871059309541525442043705945904",
                    "198444163554105703719445292860677839396"
                ],
                "threshold": 0.9
            }
        },
        {
            "target": {
                "function": "dng_jxl_decoder::Decode",
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "function_hash": "48199966959290188039054115244421736911",
                "length": 15270.0
            },
            "id": "ASB-A-483693973-30ce56e5",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483693973-346b34c0",
            "signature_type": "Function",
            "target": {
                "function": "RefVignette32",
                "file": "source/dng_reference.cpp"
            },
            "deprecated": false,
            "digest": {
                "function_hash": "263451751774552296820282662579003977281",
                "length": 2889.0
            }
        },
        {
            "target": {
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "194429832318152120016505826279203676558",
                    "256114297949970187214891844412180836502",
                    "126444389108873037626370736066057838679",
                    "31505227870708468361139613063235033024",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "219442210747282168893588532683971211708",
                    "85544908931788701955632703061608850745",
                    "207661736324343725963447752551068749907",
                    "276372092187626204415835512964915920822",
                    "315570882488630777313555668088931810548",
                    "42397838612253038046869777970799186402",
                    "121487778604610283921976092001153757926",
                    "174609805819632958857042420636862542627",
                    "84413647751528321743776639544817495485",
                    "295188874482319381987294579900155715287",
                    "78590931651208797221447672860529396684",
                    "143006721979505065825829146571374224266",
                    "227422925747106815962237482066255730592",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "206064741813473267899607204872369913527",
                    "114587952181742594445164621505764163059",
                    "335223360142301931595221913703149559416",
                    "299684555834717695959764075055340107451",
                    "317401560402810940253336490682283764906",
                    "275619135883136766640627524858469777835",
                    "154920014809758925982668630656809950658",
                    "319822407134840722721406537470593128583",
                    "295188874482319381987294579900155715287",
                    "101717909466555004239119115095314325212",
                    "182991346159673447605741278042155688613",
                    "205540023405360345270807631212234794863",
                    "231657094800547934778988824746996222970",
                    "67109680556352835788841266332591309711",
                    "107925280188158659398165054380621314795",
                    "210439544695518429601874338634815575957",
                    "250729945311996511261759986883906045812",
                    "336469723182066869446259319108635005103",
                    "290895926406959072128588980902755997721",
                    "152350955531588082222995301778828533525",
                    "122505830063992593275467144068232194818",
                    "216599293977467859364267184001158243981",
                    "171970075303922421137663405972729370356",
                    "249573132650012990722417369036659330256",
                    "209133570962727105703464439188189942960",
                    "281289793643756272858872590132087322774",
                    "1908583338489184706668230269911190269",
                    "205230080967156782375349514001451635472",
                    "192319953646988717002487947259101564735",
                    "270504200679481694402294515237005447109",
                    "206068082329815097594893569480126211772",
                    "42799029976428883652400408910263596772",
                    "141929213170761095825873447457850478468",
                    "211419625495873257150473089396326343597",
                    "322068345133459123501471549468510907128",
                    "294959699935694286472385315881216102911",
                    "174763558723061786679921619698023619176",
                    "238244061299297961297816078219613386989",
                    "13381380347433866187393591900666528314",
                    "324051759526062330859468784550774260281"
                ]
            },
            "id": "ASB-A-483693973-381621ee",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
        },
        {
            "digest": {
                "function_hash": "233538589171987627072487953860181165822",
                "length": 802.0
            },
            "signature_version": "v1",
            "id": "ASB-A-483693973-47caabd8",
            "signature_type": "Function",
            "target": {
                "function": "dng_opcode_MapTable::Prepare",
                "file": "source/dng_misc_opcodes.cpp"
            },
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "target": {
                "file": "source/dng_safe_arithmetic.cpp"
            },
            "id": "ASB-A-483693973-4e02ab37",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "81461813203922841878122831742024887931",
                    "276136351664138248967927487420087661995",
                    "1847702133262506403628391001899871870"
                ],
                "threshold": 0.9
            }
        },
        {
            "digest": {
                "function_hash": "313748811331828243694485069609631945978",
                "length": 2660.0
            },
            "signature_version": "v1",
            "id": "ASB-A-483693973-58f2b45f",
            "signature_type": "Function",
            "target": {
                "function": "RefBaselineMapPoly32",
                "file": "source/dng_reference.cpp"
            },
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
        },
        {
            "target": {
                "file": "source/dng_gain_map.cpp"
            },
            "digest": {
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "167562065648297935570025999739527902201"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-5e56f560",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
        },
        {
            "target": {
                "file": "source/dng_misc_opcodes.cpp"
            },
            "digest": {
                "line_hashes": [
                    "78293092803091822045685469605068586655",
                    "309148525367958636762284749444870258768",
                    "339338079016043470974098863766902307366",
                    "277983487065771906253343411453881601907",
                    "313763685655920154750650247899066426430",
                    "264321027642031858791937068436521892871",
                    "83696920592881808630876646630248497841",
                    "222398774077500448278032347748306936125"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-763c0f07",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
        },
        {
            "target": {
                "file": "source/dng_safe_arithmetic.h"
            },
            "digest": {
                "line_hashes": [
                    "153284349306434663837800685422563276506",
                    "49968566770195179397612428161914353344",
                    "177811306592473887597022440171324913928",
                    "198027751771547755285822070590377130596",
                    "254239998022008730328227038701683454155",
                    "109905493400984048173247668903698330837",
                    "109774030880048824448437848674791372573",
                    "254499239493248827994563675777500278167",
                    "217390056308173980711943702820658141442"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-7c3a0a2f",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
        },
        {
            "target": {
                "function": "EncodeJXL_Common",
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "function_hash": "89503221677808767108101547960089566662",
                "length": 9095.0
            },
            "id": "ASB-A-483693973-7d5bb01f",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
        },
        {
            "digest": {
                "function_hash": "82152115503763350522121318660705786903",
                "length": 1616.0
            },
            "signature_version": "v1",
            "id": "ASB-A-483693973-8dc11e7d",
            "signature_type": "Function",
            "target": {
                "function": "dng_opcode_GainMap::ProcessArea",
                "file": "source/dng_gain_map.cpp"
            },
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
        },
        {
            "digest": {
                "line_hashes": [
                    "64793168968353823424173586322329498503",
                    "258322415384496364399436372668485005640",
                    "131112155313616879697633376891217030387",
                    "4356313048916928055121043342289959923"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "id": "ASB-A-483693973-a11b6589",
            "signature_type": "Line",
            "target": {
                "file": "source/dng_tag_codes.h"
            },
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483693973-b929be0b",
            "signature_type": "Line",
            "target": {
                "file": "source/dng_reference.cpp"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "180732622798196331058376442769797459440",
                    "120180041422769094704036984644629170480",
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "86550376920491302295992689097157695056"
                ],
                "threshold": 0.9
            }
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-483693973.json"
platform/external/dng_sdk

Package

Name
platform/external/dng_sdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-06-01

Affected versions

Other
15

Ecosystem specific

{
    "spl": "2026-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
    ],
    "severity": "Critical",
    "vanir_signatures": [
        {
            "target": {
                "file": "source/dng_tag_codes.h"
            },
            "digest": {
                "line_hashes": [
                    "64793168968353823424173586322329498503",
                    "258322415384496364399436372668485005640",
                    "131112155313616879697633376891217030387",
                    "4356313048916928055121043342289959923"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-14f00905",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
        },
        {
            "digest": {
                "line_hashes": [
                    "78293092803091822045685469605068586655",
                    "309148525367958636762284749444870258768",
                    "339338079016043470974098863766902307366",
                    "277983487065771906253343411453881601907",
                    "313763685655920154750650247899066426430",
                    "264321027642031858791937068436521892871",
                    "83696920592881808630876646630248497841",
                    "222398774077500448278032347748306936125"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "id": "ASB-A-483693973-27e02ca4",
            "signature_type": "Line",
            "target": {
                "file": "source/dng_misc_opcodes.cpp"
            },
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
        },
        {
            "target": {
                "file": "source/dng_ref_counted_block.cpp"
            },
            "digest": {
                "line_hashes": [
                    "284850060203403678783638611959678025405",
                    "105726039794551679729672699644156795467",
                    "94803612871059309541525442043705945904",
                    "198444163554105703719445292860677839396"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-353b4408",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
        },
        {
            "digest": {
                "line_hashes": [
                    "153284349306434663837800685422563276506",
                    "49968566770195179397612428161914353344",
                    "177811306592473887597022440171324913928",
                    "198027751771547755285822070590377130596",
                    "254239998022008730328227038701683454155",
                    "109905493400984048173247668903698330837",
                    "109774030880048824448437848674791372573",
                    "254499239493248827994563675777500278167",
                    "217390056308173980711943702820658141442"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "id": "ASB-A-483693973-38560c80",
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.h"
            },
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "target": {
                "function": "dng_opcode_GainMap::ProcessArea",
                "file": "source/dng_gain_map.cpp"
            },
            "id": "ASB-A-483693973-5bd7a112",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "function_hash": "82152115503763350522121318660705786903",
                "length": 1616.0
            }
        },
        {
            "target": {
                "file": "source/dng_gain_map.cpp"
            },
            "digest": {
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "167562065648297935570025999739527902201"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-657d05fe",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "target": {
                "file": "source/dng_reference.cpp"
            },
            "id": "ASB-A-483693973-867bed37",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "180732622798196331058376442769797459440",
                    "120180041422769094704036984644629170480",
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "86550376920491302295992689097157695056"
                ],
                "threshold": 0.9
            }
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "target": {
                "function": "RefBaselineMapPoly32",
                "file": "source/dng_reference.cpp"
            },
            "id": "ASB-A-483693973-a530807e",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "function_hash": "313748811331828243694485069609631945978",
                "length": 2660.0
            }
        },
        {
            "target": {
                "function": "dng_ref_counted_block::Allocate",
                "file": "source/dng_ref_counted_block.cpp"
            },
            "digest": {
                "function_hash": "195248502907256290292332962174144833088",
                "length": 211.0
            },
            "id": "ASB-A-483693973-a575972c",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483693973-aa8fc6dd",
            "signature_type": "Function",
            "target": {
                "function": "dng_opcode_MapTable::Prepare",
                "file": "source/dng_misc_opcodes.cpp"
            },
            "deprecated": false,
            "digest": {
                "function_hash": "233538589171987627072487953860181165822",
                "length": 802.0
            }
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "target": {
                "file": "source/dng_safe_arithmetic.cpp"
            },
            "id": "ASB-A-483693973-ab65b1a1",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "81461813203922841878122831742024887931",
                    "276136351664138248967927487420087661995",
                    "1847702133262506403628391001899871870"
                ],
                "threshold": 0.9
            }
        },
        {
            "target": {
                "function": "dng_opcode_MapTable::ReplicateLastEntry",
                "file": "source/dng_misc_opcodes.cpp"
            },
            "digest": {
                "function_hash": "210822508803230862640516477016906542278",
                "length": 204.0
            },
            "id": "ASB-A-483693973-c8214263",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
        },
        {
            "target": {
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "line_hashes": [
                    "194429832318152120016505826279203676558",
                    "256114297949970187214891844412180836502",
                    "126444389108873037626370736066057838679",
                    "31505227870708468361139613063235033024",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "219442210747282168893588532683971211708",
                    "85544908931788701955632703061608850745",
                    "207661736324343725963447752551068749907",
                    "276372092187626204415835512964915920822",
                    "315570882488630777313555668088931810548",
                    "42397838612253038046869777970799186402",
                    "121487778604610283921976092001153757926",
                    "174609805819632958857042420636862542627",
                    "84413647751528321743776639544817495485",
                    "295188874482319381987294579900155715287",
                    "78590931651208797221447672860529396684",
                    "143006721979505065825829146571374224266",
                    "227422925747106815962237482066255730592",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "206064741813473267899607204872369913527",
                    "114587952181742594445164621505764163059",
                    "335223360142301931595221913703149559416",
                    "299684555834717695959764075055340107451",
                    "317401560402810940253336490682283764906",
                    "275619135883136766640627524858469777835",
                    "154920014809758925982668630656809950658",
                    "319822407134840722721406537470593128583",
                    "295188874482319381987294579900155715287",
                    "101717909466555004239119115095314325212",
                    "182991346159673447605741278042155688613",
                    "205540023405360345270807631212234794863",
                    "231657094800547934778988824746996222970",
                    "67109680556352835788841266332591309711",
                    "107925280188158659398165054380621314795",
                    "210439544695518429601874338634815575957",
                    "250729945311996511261759986883906045812",
                    "336469723182066869446259319108635005103",
                    "290895926406959072128588980902755997721",
                    "152350955531588082222995301778828533525",
                    "122505830063992593275467144068232194818",
                    "216599293977467859364267184001158243981",
                    "171970075303922421137663405972729370356",
                    "249573132650012990722417369036659330256",
                    "209133570962727105703464439188189942960",
                    "281289793643756272858872590132087322774",
                    "1908583338489184706668230269911190269",
                    "205230080967156782375349514001451635472",
                    "192319953646988717002487947259101564735",
                    "270504200679481694402294515237005447109",
                    "206068082329815097594893569480126211772",
                    "42799029976428883652400408910263596772",
                    "141929213170761095825873447457850478468",
                    "211419625495873257150473089396326343597",
                    "322068345133459123501471549468510907128",
                    "294959699935694286472385315881216102911",
                    "174763558723061786679921619698023619176",
                    "238244061299297961297816078219613386989",
                    "13381380347433866187393591900666528314",
                    "324051759526062330859468784550774260281"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-d9634e72",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
        },
        {
            "target": {
                "function": "RefVignette32",
                "file": "source/dng_reference.cpp"
            },
            "digest": {
                "function_hash": "263451751774552296820282662579003977281",
                "length": 2889.0
            },
            "id": "ASB-A-483693973-e1cde8eb",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
        },
        {
            "target": {
                "function": "dng_jxl_decoder::Decode",
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "function_hash": "48199966959290188039054115244421736911",
                "length": 15270.0
            },
            "id": "ASB-A-483693973-fb888ea4",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
        },
        {
            "target": {
                "function": "EncodeJXL_Common",
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "function_hash": "89503221677808767108101547960089566662",
                "length": 9095.0
            },
            "id": "ASB-A-483693973-fe36e61f",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-483693973.json"
platform/external/dng_sdk

Package

Name
platform/external/dng_sdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-06-01

Affected versions

Other
16

Ecosystem specific

{
    "spl": "2026-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef"
    ],
    "severity": "Critical",
    "vanir_signatures": [
        {
            "target": {
                "file": "source/dng_gain_map.cpp"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "167562065648297935570025999739527902201"
                ]
            },
            "id": "ASB-A-483693973-132bc9c0",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef"
        },
        {
            "target": {
                "file": "source/dng_ref_counted_block.cpp"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284850060203403678783638611959678025405",
                    "105726039794551679729672699644156795467",
                    "94803612871059309541525442043705945904",
                    "198444163554105703719445292860677839396"
                ]
            },
            "id": "ASB-A-483693973-14dc3f84",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef"
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "target": {
                "file": "source/dng_misc_opcodes.cpp"
            },
            "id": "ASB-A-483693973-2cf81010",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "78293092803091822045685469605068586655",
                    "309148525367958636762284749444870258768",
                    "339338079016043470974098863766902307366",
                    "277983487065771906253343411453881601907",
                    "313763685655920154750650247899066426430",
                    "264321027642031858791937068436521892871",
                    "83696920592881808630876646630248497841",
                    "222398774077500448278032347748306936125"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483693973-2f597cda",
            "signature_type": "Line",
            "target": {
                "file": "source/dng_jxl.cpp"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "194429832318152120016505826279203676558",
                    "256114297949970187214891844412180836502",
                    "126444389108873037626370736066057838679",
                    "31505227870708468361139613063235033024",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "219442210747282168893588532683971211708",
                    "85544908931788701955632703061608850745",
                    "207661736324343725963447752551068749907",
                    "276372092187626204415835512964915920822",
                    "315570882488630777313555668088931810548",
                    "42397838612253038046869777970799186402",
                    "121487778604610283921976092001153757926",
                    "174609805819632958857042420636862542627",
                    "84413647751528321743776639544817495485",
                    "295188874482319381987294579900155715287",
                    "78590931651208797221447672860529396684",
                    "143006721979505065825829146571374224266",
                    "227422925747106815962237482066255730592",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "206064741813473267899607204872369913527",
                    "114587952181742594445164621505764163059",
                    "335223360142301931595221913703149559416",
                    "299684555834717695959764075055340107451",
                    "317401560402810940253336490682283764906",
                    "275619135883136766640627524858469777835",
                    "154920014809758925982668630656809950658",
                    "319822407134840722721406537470593128583",
                    "295188874482319381987294579900155715287",
                    "101717909466555004239119115095314325212",
                    "182991346159673447605741278042155688613",
                    "205540023405360345270807631212234794863",
                    "231657094800547934778988824746996222970",
                    "67109680556352835788841266332591309711",
                    "107925280188158659398165054380621314795",
                    "210439544695518429601874338634815575957",
                    "250729945311996511261759986883906045812",
                    "336469723182066869446259319108635005103",
                    "290895926406959072128588980902755997721",
                    "152350955531588082222995301778828533525",
                    "122505830063992593275467144068232194818",
                    "216599293977467859364267184001158243981",
                    "171970075303922421137663405972729370356",
                    "249573132650012990722417369036659330256",
                    "209133570962727105703464439188189942960",
                    "281289793643756272858872590132087322774",
                    "1908583338489184706668230269911190269",
                    "205230080967156782375349514001451635472",
                    "192319953646988717002487947259101564735",
                    "270504200679481694402294515237005447109",
                    "206068082329815097594893569480126211772",
                    "42799029976428883652400408910263596772",
                    "141929213170761095825873447457850478468",
                    "211419625495873257150473089396326343597",
                    "322068345133459123501471549468510907128",
                    "294959699935694286472385315881216102911",
                    "174763558723061786679921619698023619176",
                    "238244061299297961297816078219613386989",
                    "13381380347433866187393591900666528314",
                    "324051759526062330859468784550774260281"
                ],
                "threshold": 0.9
            }
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483693973-3cfe1205",
            "signature_type": "Function",
            "target": {
                "function": "dng_opcode_MapTable::ReplicateLastEntry",
                "file": "source/dng_misc_opcodes.cpp"
            },
            "deprecated": false,
            "digest": {
                "function_hash": "210822508803230862640516477016906542278",
                "length": 204.0
            }
        },
        {
            "target": {
                "function": "EncodeJXL_Common",
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "function_hash": "89503221677808767108101547960089566662",
                "length": 9095.0
            },
            "id": "ASB-A-483693973-413a9ebf",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef"
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "target": {
                "function": "dng_ref_counted_block::Allocate",
                "file": "source/dng_ref_counted_block.cpp"
            },
            "id": "ASB-A-483693973-4586bbdf",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "function_hash": "195248502907256290292332962174144833088",
                "length": 211.0
            }
        },
        {
            "target": {
                "file": "source/dng_safe_arithmetic.h"
            },
            "digest": {
                "line_hashes": [
                    "153284349306434663837800685422563276506",
                    "49968566770195179397612428161914353344",
                    "177811306592473887597022440171324913928",
                    "198027751771547755285822070590377130596",
                    "254239998022008730328227038701683454155",
                    "109905493400984048173247668903698330837",
                    "109774030880048824448437848674791372573",
                    "254499239493248827994563675777500278167",
                    "217390056308173980711943702820658141442"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-606ecbd1",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef"
        },
        {
            "target": {
                "function": "RefVignette32",
                "file": "source/dng_reference.cpp"
            },
            "digest": {
                "function_hash": "263451751774552296820282662579003977281",
                "length": 2889.0
            },
            "id": "ASB-A-483693973-68f4b258",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef"
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483693973-6bec0162",
            "signature_type": "Function",
            "target": {
                "function": "dng_opcode_MapTable::Prepare",
                "file": "source/dng_misc_opcodes.cpp"
            },
            "deprecated": false,
            "digest": {
                "function_hash": "233538589171987627072487953860181165822",
                "length": 802.0
            }
        },
        {
            "target": {
                "function": "dng_jxl_decoder::Decode",
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "function_hash": "48199966959290188039054115244421736911",
                "length": 15270.0
            },
            "id": "ASB-A-483693973-725b3927",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef"
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483693973-919416dc",
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.cpp"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "81461813203922841878122831742024887931",
                    "276136351664138248967927487420087661995",
                    "1847702133262506403628391001899871870"
                ],
                "threshold": 0.9
            }
        },
        {
            "digest": {
                "function_hash": "313748811331828243694485069609631945978",
                "length": 2660.0
            },
            "signature_version": "v1",
            "id": "ASB-A-483693973-96a827fe",
            "signature_type": "Function",
            "target": {
                "function": "RefBaselineMapPoly32",
                "file": "source/dng_reference.cpp"
            },
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "180732622798196331058376442769797459440",
                    "120180041422769094704036984644629170480",
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "86550376920491302295992689097157695056"
                ]
            },
            "signature_version": "v1",
            "id": "ASB-A-483693973-bcc3dfaf",
            "signature_type": "Line",
            "target": {
                "file": "source/dng_reference.cpp"
            },
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef"
        },
        {
            "digest": {
                "line_hashes": [
                    "64793168968353823424173586322329498503",
                    "258322415384496364399436372668485005640",
                    "131112155313616879697633376891217030387",
                    "4356313048916928055121043342289959923"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "id": "ASB-A-483693973-d5865856",
            "signature_type": "Line",
            "target": {
                "file": "source/dng_tag_codes.h"
            },
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef"
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483693973-f120fe83",
            "signature_type": "Function",
            "target": {
                "function": "dng_opcode_GainMap::ProcessArea",
                "file": "source/dng_gain_map.cpp"
            },
            "deprecated": false,
            "digest": {
                "function_hash": "82152115503763350522121318660705786903",
                "length": 1616.0
            }
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-483693973.json"
platform/external/dng_sdk

Package

Name
platform/external/dng_sdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-06-01

Affected versions

Other
16-qpr2

Ecosystem specific

{
    "spl": "2026-06-01",
    "fixes": [
        "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
    ],
    "severity": "Critical",
    "vanir_signatures": [
        {
            "target": {
                "file": "source/dng_gain_map.cpp"
            },
            "digest": {
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "167562065648297935570025999739527902201"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-13ae43bc",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
        },
        {
            "target": {
                "function": "dng_opcode_MapTable::Prepare",
                "file": "source/dng_misc_opcodes.cpp"
            },
            "digest": {
                "function_hash": "233538589171987627072487953860181165822",
                "length": 802.0
            },
            "id": "ASB-A-483693973-186e0b1b",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "target": {
                "file": "source/dng_safe_arithmetic.h"
            },
            "id": "ASB-A-483693973-2f8d0143",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "153284349306434663837800685422563276506",
                    "49968566770195179397612428161914353344",
                    "177811306592473887597022440171324913928",
                    "198027751771547755285822070590377130596",
                    "254239998022008730328227038701683454155",
                    "109905493400984048173247668903698330837",
                    "109774030880048824448437848674791372573",
                    "254499239493248827994563675777500278167",
                    "217390056308173980711943702820658141442"
                ],
                "threshold": 0.9
            }
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "target": {
                "file": "source/dng_ref_counted_block.cpp"
            },
            "id": "ASB-A-483693973-31f3bb7d",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284850060203403678783638611959678025405",
                    "105726039794551679729672699644156795467",
                    "94803612871059309541525442043705945904",
                    "198444163554105703719445292860677839396"
                ]
            }
        },
        {
            "target": {
                "function": "RefBaselineMapPoly32",
                "file": "source/dng_reference.cpp"
            },
            "digest": {
                "function_hash": "313748811331828243694485069609631945978",
                "length": 2660.0
            },
            "id": "ASB-A-483693973-32f3bc25",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
        },
        {
            "target": {
                "function": "dng_jxl_decoder::Decode",
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "function_hash": "48199966959290188039054115244421736911",
                "length": 15270.0
            },
            "id": "ASB-A-483693973-399be3b3",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483693973-43c99783",
            "signature_type": "Line",
            "target": {
                "file": "source/dng_misc_opcodes.cpp"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "78293092803091822045685469605068586655",
                    "309148525367958636762284749444870258768",
                    "339338079016043470974098863766902307366",
                    "277983487065771906253343411453881601907",
                    "313763685655920154750650247899066426430",
                    "264321027642031858791937068436521892871",
                    "83696920592881808630876646630248497841",
                    "222398774077500448278032347748306936125"
                ],
                "threshold": 0.9
            }
        },
        {
            "target": {
                "function": "EncodeJXL_Common",
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "function_hash": "89503221677808767108101547960089566662",
                "length": 9095.0
            },
            "id": "ASB-A-483693973-4c49f98e",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
        },
        {
            "target": {
                "file": "source/dng_reference.cpp"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "180732622798196331058376442769797459440",
                    "120180041422769094704036984644629170480",
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "86550376920491302295992689097157695056"
                ]
            },
            "id": "ASB-A-483693973-5b46f37e",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
        },
        {
            "target": {
                "function": "RefVignette32",
                "file": "source/dng_reference.cpp"
            },
            "digest": {
                "function_hash": "263451751774552296820282662579003977281",
                "length": 2889.0
            },
            "id": "ASB-A-483693973-73284dd3",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
        },
        {
            "target": {
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "line_hashes": [
                    "194429832318152120016505826279203676558",
                    "256114297949970187214891844412180836502",
                    "126444389108873037626370736066057838679",
                    "31505227870708468361139613063235033024",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "219442210747282168893588532683971211708",
                    "85544908931788701955632703061608850745",
                    "207661736324343725963447752551068749907",
                    "276372092187626204415835512964915920822",
                    "315570882488630777313555668088931810548",
                    "42397838612253038046869777970799186402",
                    "121487778604610283921976092001153757926",
                    "174609805819632958857042420636862542627",
                    "84413647751528321743776639544817495485",
                    "295188874482319381987294579900155715287",
                    "78590931651208797221447672860529396684",
                    "143006721979505065825829146571374224266",
                    "227422925747106815962237482066255730592",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "206064741813473267899607204872369913527",
                    "114587952181742594445164621505764163059",
                    "335223360142301931595221913703149559416",
                    "299684555834717695959764075055340107451",
                    "317401560402810940253336490682283764906",
                    "275619135883136766640627524858469777835",
                    "154920014809758925982668630656809950658",
                    "319822407134840722721406537470593128583",
                    "295188874482319381987294579900155715287",
                    "101717909466555004239119115095314325212",
                    "182991346159673447605741278042155688613",
                    "205540023405360345270807631212234794863",
                    "231657094800547934778988824746996222970",
                    "67109680556352835788841266332591309711",
                    "107925280188158659398165054380621314795",
                    "210439544695518429601874338634815575957",
                    "250729945311996511261759986883906045812",
                    "336469723182066869446259319108635005103",
                    "290895926406959072128588980902755997721",
                    "152350955531588082222995301778828533525",
                    "122505830063992593275467144068232194818",
                    "216599293977467859364267184001158243981",
                    "171970075303922421137663405972729370356",
                    "249573132650012990722417369036659330256",
                    "209133570962727105703464439188189942960",
                    "281289793643756272858872590132087322774",
                    "1908583338489184706668230269911190269",
                    "205230080967156782375349514001451635472",
                    "192319953646988717002487947259101564735",
                    "270504200679481694402294515237005447109",
                    "206068082329815097594893569480126211772",
                    "42799029976428883652400408910263596772",
                    "141929213170761095825873447457850478468",
                    "211419625495873257150473089396326343597",
                    "322068345133459123501471549468510907128",
                    "294959699935694286472385315881216102911",
                    "174763558723061786679921619698023619176",
                    "238244061299297961297816078219613386989",
                    "13381380347433866187393591900666528314",
                    "324051759526062330859468784550774260281"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-78f7184b",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483693973-8d37fb94",
            "signature_type": "Line",
            "target": {
                "file": "source/dng_tag_codes.h"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "64793168968353823424173586322329498503",
                    "258322415384496364399436372668485005640",
                    "131112155313616879697633376891217030387",
                    "4356313048916928055121043342289959923"
                ],
                "threshold": 0.9
            }
        },
        {
            "target": {
                "function": "dng_opcode_MapTable::ReplicateLastEntry",
                "file": "source/dng_misc_opcodes.cpp"
            },
            "digest": {
                "function_hash": "210822508803230862640516477016906542278",
                "length": 204.0
            },
            "id": "ASB-A-483693973-8d6e5dff",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
        },
        {
            "target": {
                "function": "dng_opcode_GainMap::ProcessArea",
                "file": "source/dng_gain_map.cpp"
            },
            "digest": {
                "function_hash": "82152115503763350522121318660705786903",
                "length": 1616.0
            },
            "id": "ASB-A-483693973-9681c150",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483693973-bdfd7e1f",
            "signature_type": "Function",
            "target": {
                "function": "dng_ref_counted_block::Allocate",
                "file": "source/dng_ref_counted_block.cpp"
            },
            "deprecated": false,
            "digest": {
                "function_hash": "195248502907256290292332962174144833088",
                "length": 211.0
            }
        },
        {
            "digest": {
                "line_hashes": [
                    "81461813203922841878122831742024887931",
                    "276136351664138248967927487420087661995",
                    "1847702133262506403628391001899871870"
                ],
                "threshold": 0.9
            },
            "signature_version": "v1",
            "id": "ASB-A-483693973-f8c58b9d",
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.cpp"
            },
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-483693973.json"
platform/external/dng_sdk

Package

Name
platform/external/dng_sdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-06-01

Affected versions

Other
14

Ecosystem specific

{
    "severity": "Critical",
    "fixes": [
        "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
    ],
    "spl": "2026-06-01",
    "vanir_signatures": [
        {
            "target": {
                "function": "dng_jxl_decoder::Decode",
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "function_hash": "48199966959290188039054115244421736911",
                "length": 15270.0
            },
            "id": "ASB-A-483693973-1c35bc58",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        },
        {
            "target": {
                "file": "source/dng_safe_arithmetic.h"
            },
            "digest": {
                "line_hashes": [
                    "153284349306434663837800685422563276506",
                    "49968566770195179397612428161914353344",
                    "177811306592473887597022440171324913928",
                    "198027751771547755285822070590377130596",
                    "254239998022008730328227038701683454155",
                    "109905493400984048173247668903698330837",
                    "109774030880048824448437848674791372573",
                    "254499239493248827994563675777500278167",
                    "217390056308173980711943702820658141442"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-227b4ab5",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        },
        {
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483693973-23d8d3fa",
            "signature_type": "Function",
            "target": {
                "function": "EncodeJXL_Common",
                "file": "source/dng_jxl.cpp"
            },
            "deprecated": false,
            "digest": {
                "function_hash": "89503221677808767108101547960089566662",
                "length": 9095.0
            }
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "target": {
                "file": "source/dng_misc_opcodes.cpp"
            },
            "id": "ASB-A-483693973-41252d4f",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "78293092803091822045685469605068586655",
                    "309148525367958636762284749444870258768",
                    "339338079016043470974098863766902307366",
                    "277983487065771906253343411453881601907",
                    "313763685655920154750650247899066426430",
                    "264321027642031858791937068436521892871",
                    "83696920592881808630876646630248497841",
                    "222398774077500448278032347748306936125"
                ]
            }
        },
        {
            "target": {
                "file": "source/dng_reference.cpp"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "180732622798196331058376442769797459440",
                    "120180041422769094704036984644629170480",
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "86550376920491302295992689097157695056"
                ]
            },
            "id": "ASB-A-483693973-5e463905",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "target": {
                "file": "source/dng_gain_map.cpp"
            },
            "id": "ASB-A-483693973-77c568ea",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "167562065648297935570025999739527902201"
                ],
                "threshold": 0.9
            }
        },
        {
            "target": {
                "file": "source/dng_safe_arithmetic.cpp"
            },
            "digest": {
                "line_hashes": [
                    "81461813203922841878122831742024887931",
                    "276136351664138248967927487420087661995",
                    "1847702133262506403628391001899871870"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-9ea0b8d6",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        },
        {
            "target": {
                "function": "dng_ref_counted_block::Allocate",
                "file": "source/dng_ref_counted_block.cpp"
            },
            "digest": {
                "function_hash": "195248502907256290292332962174144833088",
                "length": 211.0
            },
            "id": "ASB-A-483693973-a55d4011",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        },
        {
            "target": {
                "function": "dng_opcode_GainMap::ProcessArea",
                "file": "source/dng_gain_map.cpp"
            },
            "digest": {
                "function_hash": "82152115503763350522121318660705786903",
                "length": 1616.0
            },
            "id": "ASB-A-483693973-a6afe69e",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        },
        {
            "digest": {
                "function_hash": "263451751774552296820282662579003977281",
                "length": 2889.0
            },
            "signature_version": "v1",
            "id": "ASB-A-483693973-af55a462",
            "signature_type": "Function",
            "target": {
                "function": "RefVignette32",
                "file": "source/dng_reference.cpp"
            },
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        },
        {
            "target": {
                "file": "source/dng_ref_counted_block.cpp"
            },
            "digest": {
                "line_hashes": [
                    "284850060203403678783638611959678025405",
                    "105726039794551679729672699644156795467",
                    "94803612871059309541525442043705945904",
                    "198444163554105703719445292860677839396"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-b0632ae9",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        },
        {
            "target": {
                "file": "source/dng_tag_codes.h"
            },
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "64793168968353823424173586322329498503",
                    "258322415384496364399436372668485005640",
                    "131112155313616879697633376891217030387",
                    "4356313048916928055121043342289959923"
                ]
            },
            "id": "ASB-A-483693973-bd859c98",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        },
        {
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "target": {
                "function": "dng_opcode_MapTable::ReplicateLastEntry",
                "file": "source/dng_misc_opcodes.cpp"
            },
            "id": "ASB-A-483693973-c3ca2640",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "digest": {
                "function_hash": "210822508803230862640516477016906542278",
                "length": 204.0
            }
        },
        {
            "target": {
                "function": "dng_opcode_MapTable::Prepare",
                "file": "source/dng_misc_opcodes.cpp"
            },
            "digest": {
                "function_hash": "233538589171987627072487953860181165822",
                "length": 802.0
            },
            "id": "ASB-A-483693973-f40e5f6e",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        },
        {
            "target": {
                "function": "RefBaselineMapPoly32",
                "file": "source/dng_reference.cpp"
            },
            "digest": {
                "function_hash": "313748811331828243694485069609631945978",
                "length": 2660.0
            },
            "id": "ASB-A-483693973-fa3cac0b",
            "signature_type": "Function",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        },
        {
            "target": {
                "file": "source/dng_jxl.cpp"
            },
            "digest": {
                "line_hashes": [
                    "194429832318152120016505826279203676558",
                    "256114297949970187214891844412180836502",
                    "126444389108873037626370736066057838679",
                    "31505227870708468361139613063235033024",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "219442210747282168893588532683971211708",
                    "85544908931788701955632703061608850745",
                    "207661736324343725963447752551068749907",
                    "276372092187626204415835512964915920822",
                    "315570882488630777313555668088931810548",
                    "42397838612253038046869777970799186402",
                    "121487778604610283921976092001153757926",
                    "174609805819632958857042420636862542627",
                    "84413647751528321743776639544817495485",
                    "295188874482319381987294579900155715287",
                    "78590931651208797221447672860529396684",
                    "143006721979505065825829146571374224266",
                    "227422925747106815962237482066255730592",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "206064741813473267899607204872369913527",
                    "114587952181742594445164621505764163059",
                    "335223360142301931595221913703149559416",
                    "299684555834717695959764075055340107451",
                    "317401560402810940253336490682283764906",
                    "275619135883136766640627524858469777835",
                    "154920014809758925982668630656809950658",
                    "319822407134840722721406537470593128583",
                    "295188874482319381987294579900155715287",
                    "101717909466555004239119115095314325212",
                    "182991346159673447605741278042155688613",
                    "205540023405360345270807631212234794863",
                    "231657094800547934778988824746996222970",
                    "67109680556352835788841266332591309711",
                    "107925280188158659398165054380621314795",
                    "210439544695518429601874338634815575957",
                    "250729945311996511261759986883906045812",
                    "336469723182066869446259319108635005103",
                    "290895926406959072128588980902755997721",
                    "152350955531588082222995301778828533525",
                    "122505830063992593275467144068232194818",
                    "216599293977467859364267184001158243981",
                    "171970075303922421137663405972729370356",
                    "249573132650012990722417369036659330256",
                    "209133570962727105703464439188189942960",
                    "281289793643756272858872590132087322774",
                    "1908583338489184706668230269911190269",
                    "205230080967156782375349514001451635472",
                    "192319953646988717002487947259101564735",
                    "270504200679481694402294515237005447109",
                    "206068082329815097594893569480126211772",
                    "42799029976428883652400408910263596772",
                    "141929213170761095825873447457850478468",
                    "211419625495873257150473089396326343597",
                    "322068345133459123501471549468510907128",
                    "294959699935694286472385315881216102911",
                    "174763558723061786679921619698023619176",
                    "238244061299297961297816078219613386989",
                    "13381380347433866187393591900666528314",
                    "324051759526062330859468784550774260281"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-483693973-faf11a02",
            "signature_type": "Line",
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
        }
    ],
    "types": [
        "EoP"
    ]
}

Database specific

source
"https://storage.googleapis.com/android-osv/ASB-A-483693973.json"