ASB-A-483697751

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-483697751.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-483697751
Aliases
  • A-483697751
  • CVE-2026-21353
Published
2026-06-01T00:00:00Z
Modified
2026-08-10T18:17:26.985773039Z
Summary
[none]
Details

In multiple functions of dng_jxl.cpp, there is a possible integer overflow due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/external/dng_sdk

Package

Name
platform/external/dng_sdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-06-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "severity": "Critical",
    "fixes": [
        "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593"
    ],
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_misc_opcodes.cpp",
                "function": "dng_opcode_MapTable::ReplicateLastEntry"
            },
            "deprecated": false,
            "digest": {
                "length": 204.0,
                "function_hash": "210822508803230862640516477016906542278"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-0c61cf0a"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_ref_counted_block.cpp",
                "function": "dng_ref_counted_block::Allocate"
            },
            "deprecated": false,
            "digest": {
                "length": 211.0,
                "function_hash": "195248502907256290292332962174144833088"
            },
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "signature_version": "v1",
            "id": "ASB-A-483697751-1025e0a4"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_ref_counted_block.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284850060203403678783638611959678025405",
                    "105726039794551679729672699644156795467",
                    "94803612871059309541525442043705945904",
                    "198444163554105703719445292860677839396"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-30428f10"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_jxl.cpp",
                "function": "dng_jxl_decoder::Decode"
            },
            "deprecated": false,
            "digest": {
                "length": 15270.0,
                "function_hash": "48199966959290188039054115244421736911"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-30ce56e5"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_reference.cpp",
                "function": "RefVignette32"
            },
            "deprecated": false,
            "digest": {
                "length": 2889.0,
                "function_hash": "263451751774552296820282662579003977281"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-346b34c0"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_jxl.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "194429832318152120016505826279203676558",
                    "256114297949970187214891844412180836502",
                    "126444389108873037626370736066057838679",
                    "31505227870708468361139613063235033024",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "219442210747282168893588532683971211708",
                    "85544908931788701955632703061608850745",
                    "207661736324343725963447752551068749907",
                    "276372092187626204415835512964915920822",
                    "315570882488630777313555668088931810548",
                    "42397838612253038046869777970799186402",
                    "121487778604610283921976092001153757926",
                    "174609805819632958857042420636862542627",
                    "84413647751528321743776639544817495485",
                    "295188874482319381987294579900155715287",
                    "78590931651208797221447672860529396684",
                    "143006721979505065825829146571374224266",
                    "227422925747106815962237482066255730592",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "206064741813473267899607204872369913527",
                    "114587952181742594445164621505764163059",
                    "335223360142301931595221913703149559416",
                    "299684555834717695959764075055340107451",
                    "317401560402810940253336490682283764906",
                    "275619135883136766640627524858469777835",
                    "154920014809758925982668630656809950658",
                    "319822407134840722721406537470593128583",
                    "295188874482319381987294579900155715287",
                    "101717909466555004239119115095314325212",
                    "182991346159673447605741278042155688613",
                    "205540023405360345270807631212234794863",
                    "231657094800547934778988824746996222970",
                    "67109680556352835788841266332591309711",
                    "107925280188158659398165054380621314795",
                    "210439544695518429601874338634815575957",
                    "250729945311996511261759986883906045812",
                    "336469723182066869446259319108635005103",
                    "290895926406959072128588980902755997721",
                    "152350955531588082222995301778828533525",
                    "122505830063992593275467144068232194818",
                    "216599293977467859364267184001158243981",
                    "171970075303922421137663405972729370356",
                    "249573132650012990722417369036659330256",
                    "209133570962727105703464439188189942960",
                    "281289793643756272858872590132087322774",
                    "1908583338489184706668230269911190269",
                    "205230080967156782375349514001451635472",
                    "192319953646988717002487947259101564735",
                    "270504200679481694402294515237005447109",
                    "206068082329815097594893569480126211772",
                    "42799029976428883652400408910263596772",
                    "141929213170761095825873447457850478468",
                    "211419625495873257150473089396326343597",
                    "322068345133459123501471549468510907128",
                    "294959699935694286472385315881216102911",
                    "174763558723061786679921619698023619176",
                    "238244061299297961297816078219613386989",
                    "13381380347433866187393591900666528314",
                    "324051759526062330859468784550774260281"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-381621ee"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_misc_opcodes.cpp",
                "function": "dng_opcode_MapTable::Prepare"
            },
            "deprecated": false,
            "digest": {
                "length": 802.0,
                "function_hash": "233538589171987627072487953860181165822"
            },
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "signature_version": "v1",
            "id": "ASB-A-483697751-47caabd8"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "81461813203922841878122831742024887931",
                    "276136351664138248967927487420087661995",
                    "1847702133262506403628391001899871870"
                ]
            },
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "signature_version": "v1",
            "id": "ASB-A-483697751-4e02ab37"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_reference.cpp",
                "function": "RefBaselineMapPoly32"
            },
            "deprecated": false,
            "digest": {
                "length": 2660.0,
                "function_hash": "313748811331828243694485069609631945978"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-58f2b45f"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_gain_map.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "167562065648297935570025999739527902201"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-5e56f560"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_misc_opcodes.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "78293092803091822045685469605068586655",
                    "309148525367958636762284749444870258768",
                    "339338079016043470974098863766902307366",
                    "277983487065771906253343411453881601907",
                    "313763685655920154750650247899066426430",
                    "264321027642031858791937068436521892871",
                    "83696920592881808630876646630248497841",
                    "222398774077500448278032347748306936125"
                ]
            },
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "signature_version": "v1",
            "id": "ASB-A-483697751-763c0f07"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.h"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "153284349306434663837800685422563276506",
                    "49968566770195179397612428161914353344",
                    "177811306592473887597022440171324913928",
                    "198027751771547755285822070590377130596",
                    "254239998022008730328227038701683454155",
                    "109905493400984048173247668903698330837",
                    "109774030880048824448437848674791372573",
                    "254499239493248827994563675777500278167",
                    "217390056308173980711943702820658141442"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-7c3a0a2f"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_jxl.cpp",
                "function": "EncodeJXL_Common"
            },
            "deprecated": false,
            "digest": {
                "length": 9095.0,
                "function_hash": "89503221677808767108101547960089566662"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-7d5bb01f"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_gain_map.cpp",
                "function": "dng_opcode_GainMap::ProcessArea"
            },
            "deprecated": false,
            "digest": {
                "length": 1616.0,
                "function_hash": "82152115503763350522121318660705786903"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-8dc11e7d"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_tag_codes.h"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "64793168968353823424173586322329498503",
                    "258322415384496364399436372668485005640",
                    "131112155313616879697633376891217030387",
                    "4356313048916928055121043342289959923"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-a11b6589"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_reference.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "180732622798196331058376442769797459440",
                    "120180041422769094704036984644629170480",
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "86550376920491302295992689097157695056"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/831d3991198533c26e8fd2bf963e494e99bc6593",
            "id": "ASB-A-483697751-b929be0b"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-483697751.json"
platform/external/dng_sdk

Package

Name
platform/external/dng_sdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-06-01

Affected versions

Other
15

Ecosystem specific 

{
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "severity": "Critical",
    "fixes": [
        "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37"
    ],
    "vanir_signatures": [
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_tag_codes.h"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "64793168968353823424173586322329498503",
                    "258322415384496364399436372668485005640",
                    "131112155313616879697633376891217030387",
                    "4356313048916928055121043342289959923"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-14f00905"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_misc_opcodes.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "78293092803091822045685469605068586655",
                    "309148525367958636762284749444870258768",
                    "339338079016043470974098863766902307366",
                    "277983487065771906253343411453881601907",
                    "313763685655920154750650247899066426430",
                    "264321027642031858791937068436521892871",
                    "83696920592881808630876646630248497841",
                    "222398774077500448278032347748306936125"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-27e02ca4"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_ref_counted_block.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284850060203403678783638611959678025405",
                    "105726039794551679729672699644156795467",
                    "94803612871059309541525442043705945904",
                    "198444163554105703719445292860677839396"
                ]
            },
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "signature_version": "v1",
            "id": "ASB-A-483697751-353b4408"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.h"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "153284349306434663837800685422563276506",
                    "49968566770195179397612428161914353344",
                    "177811306592473887597022440171324913928",
                    "198027751771547755285822070590377130596",
                    "254239998022008730328227038701683454155",
                    "109905493400984048173247668903698330837",
                    "109774030880048824448437848674791372573",
                    "254499239493248827994563675777500278167",
                    "217390056308173980711943702820658141442"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-38560c80"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_gain_map.cpp",
                "function": "dng_opcode_GainMap::ProcessArea"
            },
            "deprecated": false,
            "digest": {
                "length": 1616.0,
                "function_hash": "82152115503763350522121318660705786903"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-5bd7a112"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_gain_map.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "167562065648297935570025999739527902201"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-657d05fe"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_reference.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "180732622798196331058376442769797459440",
                    "120180041422769094704036984644629170480",
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "86550376920491302295992689097157695056"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-867bed37"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_reference.cpp",
                "function": "RefBaselineMapPoly32"
            },
            "deprecated": false,
            "digest": {
                "length": 2660.0,
                "function_hash": "313748811331828243694485069609631945978"
            },
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "signature_version": "v1",
            "id": "ASB-A-483697751-a530807e"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_ref_counted_block.cpp",
                "function": "dng_ref_counted_block::Allocate"
            },
            "deprecated": false,
            "digest": {
                "length": 211.0,
                "function_hash": "195248502907256290292332962174144833088"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-a575972c"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_misc_opcodes.cpp",
                "function": "dng_opcode_MapTable::Prepare"
            },
            "deprecated": false,
            "digest": {
                "length": 802.0,
                "function_hash": "233538589171987627072487953860181165822"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-aa8fc6dd"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "81461813203922841878122831742024887931",
                    "276136351664138248967927487420087661995",
                    "1847702133262506403628391001899871870"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-ab65b1a1"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_misc_opcodes.cpp",
                "function": "dng_opcode_MapTable::ReplicateLastEntry"
            },
            "deprecated": false,
            "digest": {
                "length": 204.0,
                "function_hash": "210822508803230862640516477016906542278"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-c8214263"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_jxl.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "194429832318152120016505826279203676558",
                    "256114297949970187214891844412180836502",
                    "126444389108873037626370736066057838679",
                    "31505227870708468361139613063235033024",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "219442210747282168893588532683971211708",
                    "85544908931788701955632703061608850745",
                    "207661736324343725963447752551068749907",
                    "276372092187626204415835512964915920822",
                    "315570882488630777313555668088931810548",
                    "42397838612253038046869777970799186402",
                    "121487778604610283921976092001153757926",
                    "174609805819632958857042420636862542627",
                    "84413647751528321743776639544817495485",
                    "295188874482319381987294579900155715287",
                    "78590931651208797221447672860529396684",
                    "143006721979505065825829146571374224266",
                    "227422925747106815962237482066255730592",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "206064741813473267899607204872369913527",
                    "114587952181742594445164621505764163059",
                    "335223360142301931595221913703149559416",
                    "299684555834717695959764075055340107451",
                    "317401560402810940253336490682283764906",
                    "275619135883136766640627524858469777835",
                    "154920014809758925982668630656809950658",
                    "319822407134840722721406537470593128583",
                    "295188874482319381987294579900155715287",
                    "101717909466555004239119115095314325212",
                    "182991346159673447605741278042155688613",
                    "205540023405360345270807631212234794863",
                    "231657094800547934778988824746996222970",
                    "67109680556352835788841266332591309711",
                    "107925280188158659398165054380621314795",
                    "210439544695518429601874338634815575957",
                    "250729945311996511261759986883906045812",
                    "336469723182066869446259319108635005103",
                    "290895926406959072128588980902755997721",
                    "152350955531588082222995301778828533525",
                    "122505830063992593275467144068232194818",
                    "216599293977467859364267184001158243981",
                    "171970075303922421137663405972729370356",
                    "249573132650012990722417369036659330256",
                    "209133570962727105703464439188189942960",
                    "281289793643756272858872590132087322774",
                    "1908583338489184706668230269911190269",
                    "205230080967156782375349514001451635472",
                    "192319953646988717002487947259101564735",
                    "270504200679481694402294515237005447109",
                    "206068082329815097594893569480126211772",
                    "42799029976428883652400408910263596772",
                    "141929213170761095825873447457850478468",
                    "211419625495873257150473089396326343597",
                    "322068345133459123501471549468510907128",
                    "294959699935694286472385315881216102911",
                    "174763558723061786679921619698023619176",
                    "238244061299297961297816078219613386989",
                    "13381380347433866187393591900666528314",
                    "324051759526062330859468784550774260281"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-d9634e72"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_reference.cpp",
                "function": "RefVignette32"
            },
            "deprecated": false,
            "digest": {
                "length": 2889.0,
                "function_hash": "263451751774552296820282662579003977281"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-e1cde8eb"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_jxl.cpp",
                "function": "dng_jxl_decoder::Decode"
            },
            "deprecated": false,
            "digest": {
                "length": 15270.0,
                "function_hash": "48199966959290188039054115244421736911"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-fb888ea4"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_jxl.cpp",
                "function": "EncodeJXL_Common"
            },
            "deprecated": false,
            "digest": {
                "length": 9095.0,
                "function_hash": "89503221677808767108101547960089566662"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/a9d47d71823b31089b2bac7d078d62b0eb56cd37",
            "id": "ASB-A-483697751-fe36e61f"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-483697751.json"
platform/external/dng_sdk

Package

Name
platform/external/dng_sdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-06-01

Affected versions

Other
16

Ecosystem specific 

{
    "types": [
        "EoP"
    ],
    "spl": "2026-06-01",
    "severity": "Critical",
    "fixes": [
        "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef"
    ],
    "vanir_signatures": [
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_gain_map.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "167562065648297935570025999739527902201"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-132bc9c0"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_ref_counted_block.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284850060203403678783638611959678025405",
                    "105726039794551679729672699644156795467",
                    "94803612871059309541525442043705945904",
                    "198444163554105703719445292860677839396"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-14dc3f84"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_misc_opcodes.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "78293092803091822045685469605068586655",
                    "309148525367958636762284749444870258768",
                    "339338079016043470974098863766902307366",
                    "277983487065771906253343411453881601907",
                    "313763685655920154750650247899066426430",
                    "264321027642031858791937068436521892871",
                    "83696920592881808630876646630248497841",
                    "222398774077500448278032347748306936125"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-2cf81010"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_jxl.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "194429832318152120016505826279203676558",
                    "256114297949970187214891844412180836502",
                    "126444389108873037626370736066057838679",
                    "31505227870708468361139613063235033024",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "219442210747282168893588532683971211708",
                    "85544908931788701955632703061608850745",
                    "207661736324343725963447752551068749907",
                    "276372092187626204415835512964915920822",
                    "315570882488630777313555668088931810548",
                    "42397838612253038046869777970799186402",
                    "121487778604610283921976092001153757926",
                    "174609805819632958857042420636862542627",
                    "84413647751528321743776639544817495485",
                    "295188874482319381987294579900155715287",
                    "78590931651208797221447672860529396684",
                    "143006721979505065825829146571374224266",
                    "227422925747106815962237482066255730592",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "206064741813473267899607204872369913527",
                    "114587952181742594445164621505764163059",
                    "335223360142301931595221913703149559416",
                    "299684555834717695959764075055340107451",
                    "317401560402810940253336490682283764906",
                    "275619135883136766640627524858469777835",
                    "154920014809758925982668630656809950658",
                    "319822407134840722721406537470593128583",
                    "295188874482319381987294579900155715287",
                    "101717909466555004239119115095314325212",
                    "182991346159673447605741278042155688613",
                    "205540023405360345270807631212234794863",
                    "231657094800547934778988824746996222970",
                    "67109680556352835788841266332591309711",
                    "107925280188158659398165054380621314795",
                    "210439544695518429601874338634815575957",
                    "250729945311996511261759986883906045812",
                    "336469723182066869446259319108635005103",
                    "290895926406959072128588980902755997721",
                    "152350955531588082222995301778828533525",
                    "122505830063992593275467144068232194818",
                    "216599293977467859364267184001158243981",
                    "171970075303922421137663405972729370356",
                    "249573132650012990722417369036659330256",
                    "209133570962727105703464439188189942960",
                    "281289793643756272858872590132087322774",
                    "1908583338489184706668230269911190269",
                    "205230080967156782375349514001451635472",
                    "192319953646988717002487947259101564735",
                    "270504200679481694402294515237005447109",
                    "206068082329815097594893569480126211772",
                    "42799029976428883652400408910263596772",
                    "141929213170761095825873447457850478468",
                    "211419625495873257150473089396326343597",
                    "322068345133459123501471549468510907128",
                    "294959699935694286472385315881216102911",
                    "174763558723061786679921619698023619176",
                    "238244061299297961297816078219613386989",
                    "13381380347433866187393591900666528314",
                    "324051759526062330859468784550774260281"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-2f597cda"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_misc_opcodes.cpp",
                "function": "dng_opcode_MapTable::ReplicateLastEntry"
            },
            "deprecated": false,
            "digest": {
                "length": 204.0,
                "function_hash": "210822508803230862640516477016906542278"
            },
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "signature_version": "v1",
            "id": "ASB-A-483697751-3cfe1205"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_jxl.cpp",
                "function": "EncodeJXL_Common"
            },
            "deprecated": false,
            "digest": {
                "length": 9095.0,
                "function_hash": "89503221677808767108101547960089566662"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-413a9ebf"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_ref_counted_block.cpp",
                "function": "dng_ref_counted_block::Allocate"
            },
            "deprecated": false,
            "digest": {
                "length": 211.0,
                "function_hash": "195248502907256290292332962174144833088"
            },
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "signature_version": "v1",
            "id": "ASB-A-483697751-4586bbdf"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.h"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "153284349306434663837800685422563276506",
                    "49968566770195179397612428161914353344",
                    "177811306592473887597022440171324913928",
                    "198027751771547755285822070590377130596",
                    "254239998022008730328227038701683454155",
                    "109905493400984048173247668903698330837",
                    "109774030880048824448437848674791372573",
                    "254499239493248827994563675777500278167",
                    "217390056308173980711943702820658141442"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-606ecbd1"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_reference.cpp",
                "function": "RefVignette32"
            },
            "deprecated": false,
            "digest": {
                "length": 2889.0,
                "function_hash": "263451751774552296820282662579003977281"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-68f4b258"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_misc_opcodes.cpp",
                "function": "dng_opcode_MapTable::Prepare"
            },
            "deprecated": false,
            "digest": {
                "length": 802.0,
                "function_hash": "233538589171987627072487953860181165822"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-6bec0162"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_jxl.cpp",
                "function": "dng_jxl_decoder::Decode"
            },
            "deprecated": false,
            "digest": {
                "length": 15270.0,
                "function_hash": "48199966959290188039054115244421736911"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-725b3927"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "81461813203922841878122831742024887931",
                    "276136351664138248967927487420087661995",
                    "1847702133262506403628391001899871870"
                ]
            },
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "signature_version": "v1",
            "id": "ASB-A-483697751-919416dc"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_reference.cpp",
                "function": "RefBaselineMapPoly32"
            },
            "deprecated": false,
            "digest": {
                "length": 2660.0,
                "function_hash": "313748811331828243694485069609631945978"
            },
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "signature_version": "v1",
            "id": "ASB-A-483697751-96a827fe"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_reference.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "180732622798196331058376442769797459440",
                    "120180041422769094704036984644629170480",
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "86550376920491302295992689097157695056"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-bcc3dfaf"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_tag_codes.h"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "64793168968353823424173586322329498503",
                    "258322415384496364399436372668485005640",
                    "131112155313616879697633376891217030387",
                    "4356313048916928055121043342289959923"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-d5865856"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_gain_map.cpp",
                "function": "dng_opcode_GainMap::ProcessArea"
            },
            "deprecated": false,
            "digest": {
                "length": 1616.0,
                "function_hash": "82152115503763350522121318660705786903"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/d94fedb3f402a2f5768a70a68c8f5136400a23ef",
            "id": "ASB-A-483697751-f120fe83"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-483697751.json"
platform/external/dng_sdk

Package

Name
platform/external/dng_sdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-06-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "severity": "Critical",
    "fixes": [
        "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd"
    ],
    "vanir_signatures": [
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_gain_map.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "167562065648297935570025999739527902201"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-13ae43bc"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_misc_opcodes.cpp",
                "function": "dng_opcode_MapTable::Prepare"
            },
            "deprecated": false,
            "digest": {
                "length": 802.0,
                "function_hash": "233538589171987627072487953860181165822"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-186e0b1b"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.h"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "153284349306434663837800685422563276506",
                    "49968566770195179397612428161914353344",
                    "177811306592473887597022440171324913928",
                    "198027751771547755285822070590377130596",
                    "254239998022008730328227038701683454155",
                    "109905493400984048173247668903698330837",
                    "109774030880048824448437848674791372573",
                    "254499239493248827994563675777500278167",
                    "217390056308173980711943702820658141442"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-2f8d0143"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_ref_counted_block.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284850060203403678783638611959678025405",
                    "105726039794551679729672699644156795467",
                    "94803612871059309541525442043705945904",
                    "198444163554105703719445292860677839396"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-31f3bb7d"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_reference.cpp",
                "function": "RefBaselineMapPoly32"
            },
            "deprecated": false,
            "digest": {
                "length": 2660.0,
                "function_hash": "313748811331828243694485069609631945978"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-32f3bc25"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_jxl.cpp",
                "function": "dng_jxl_decoder::Decode"
            },
            "deprecated": false,
            "digest": {
                "length": 15270.0,
                "function_hash": "48199966959290188039054115244421736911"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-399be3b3"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_misc_opcodes.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "78293092803091822045685469605068586655",
                    "309148525367958636762284749444870258768",
                    "339338079016043470974098863766902307366",
                    "277983487065771906253343411453881601907",
                    "313763685655920154750650247899066426430",
                    "264321027642031858791937068436521892871",
                    "83696920592881808630876646630248497841",
                    "222398774077500448278032347748306936125"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-43c99783"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_jxl.cpp",
                "function": "EncodeJXL_Common"
            },
            "deprecated": false,
            "digest": {
                "length": 9095.0,
                "function_hash": "89503221677808767108101547960089566662"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-4c49f98e"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_reference.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "180732622798196331058376442769797459440",
                    "120180041422769094704036984644629170480",
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "86550376920491302295992689097157695056"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-5b46f37e"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_reference.cpp",
                "function": "RefVignette32"
            },
            "deprecated": false,
            "digest": {
                "length": 2889.0,
                "function_hash": "263451751774552296820282662579003977281"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-73284dd3"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_jxl.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "194429832318152120016505826279203676558",
                    "256114297949970187214891844412180836502",
                    "126444389108873037626370736066057838679",
                    "31505227870708468361139613063235033024",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "219442210747282168893588532683971211708",
                    "85544908931788701955632703061608850745",
                    "207661736324343725963447752551068749907",
                    "276372092187626204415835512964915920822",
                    "315570882488630777313555668088931810548",
                    "42397838612253038046869777970799186402",
                    "121487778604610283921976092001153757926",
                    "174609805819632958857042420636862542627",
                    "84413647751528321743776639544817495485",
                    "295188874482319381987294579900155715287",
                    "78590931651208797221447672860529396684",
                    "143006721979505065825829146571374224266",
                    "227422925747106815962237482066255730592",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "206064741813473267899607204872369913527",
                    "114587952181742594445164621505764163059",
                    "335223360142301931595221913703149559416",
                    "299684555834717695959764075055340107451",
                    "317401560402810940253336490682283764906",
                    "275619135883136766640627524858469777835",
                    "154920014809758925982668630656809950658",
                    "319822407134840722721406537470593128583",
                    "295188874482319381987294579900155715287",
                    "101717909466555004239119115095314325212",
                    "182991346159673447605741278042155688613",
                    "205540023405360345270807631212234794863",
                    "231657094800547934778988824746996222970",
                    "67109680556352835788841266332591309711",
                    "107925280188158659398165054380621314795",
                    "210439544695518429601874338634815575957",
                    "250729945311996511261759986883906045812",
                    "336469723182066869446259319108635005103",
                    "290895926406959072128588980902755997721",
                    "152350955531588082222995301778828533525",
                    "122505830063992593275467144068232194818",
                    "216599293977467859364267184001158243981",
                    "171970075303922421137663405972729370356",
                    "249573132650012990722417369036659330256",
                    "209133570962727105703464439188189942960",
                    "281289793643756272858872590132087322774",
                    "1908583338489184706668230269911190269",
                    "205230080967156782375349514001451635472",
                    "192319953646988717002487947259101564735",
                    "270504200679481694402294515237005447109",
                    "206068082329815097594893569480126211772",
                    "42799029976428883652400408910263596772",
                    "141929213170761095825873447457850478468",
                    "211419625495873257150473089396326343597",
                    "322068345133459123501471549468510907128",
                    "294959699935694286472385315881216102911",
                    "174763558723061786679921619698023619176",
                    "238244061299297961297816078219613386989",
                    "13381380347433866187393591900666528314",
                    "324051759526062330859468784550774260281"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-78f7184b"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_tag_codes.h"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "64793168968353823424173586322329498503",
                    "258322415384496364399436372668485005640",
                    "131112155313616879697633376891217030387",
                    "4356313048916928055121043342289959923"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-8d37fb94"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_misc_opcodes.cpp",
                "function": "dng_opcode_MapTable::ReplicateLastEntry"
            },
            "deprecated": false,
            "digest": {
                "length": 204.0,
                "function_hash": "210822508803230862640516477016906542278"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-8d6e5dff"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_gain_map.cpp",
                "function": "dng_opcode_GainMap::ProcessArea"
            },
            "deprecated": false,
            "digest": {
                "length": 1616.0,
                "function_hash": "82152115503763350522121318660705786903"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-9681c150"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_ref_counted_block.cpp",
                "function": "dng_ref_counted_block::Allocate"
            },
            "deprecated": false,
            "digest": {
                "length": 211.0,
                "function_hash": "195248502907256290292332962174144833088"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-bdfd7e1f"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "81461813203922841878122831742024887931",
                    "276136351664138248967927487420087661995",
                    "1847702133262506403628391001899871870"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/47f711196fa1d577862b943e9ae72dba512e60cd",
            "id": "ASB-A-483697751-f8c58b9d"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-483697751.json"
platform/external/dng_sdk

Package

Name
platform/external/dng_sdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-06-01

Affected versions

Other
14

Ecosystem specific 

{
    "spl": "2026-06-01",
    "types": [
        "EoP"
    ],
    "severity": "Critical",
    "fixes": [
        "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a"
    ],
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_jxl.cpp",
                "function": "dng_jxl_decoder::Decode"
            },
            "deprecated": false,
            "digest": {
                "length": 15270.0,
                "function_hash": "48199966959290188039054115244421736911"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-1c35bc58"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.h"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "153284349306434663837800685422563276506",
                    "49968566770195179397612428161914353344",
                    "177811306592473887597022440171324913928",
                    "198027751771547755285822070590377130596",
                    "254239998022008730328227038701683454155",
                    "109905493400984048173247668903698330837",
                    "109774030880048824448437848674791372573",
                    "254499239493248827994563675777500278167",
                    "217390056308173980711943702820658141442"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-227b4ab5"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_jxl.cpp",
                "function": "EncodeJXL_Common"
            },
            "deprecated": false,
            "digest": {
                "length": 9095.0,
                "function_hash": "89503221677808767108101547960089566662"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-23d8d3fa"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_misc_opcodes.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "78293092803091822045685469605068586655",
                    "309148525367958636762284749444870258768",
                    "339338079016043470974098863766902307366",
                    "277983487065771906253343411453881601907",
                    "313763685655920154750650247899066426430",
                    "264321027642031858791937068436521892871",
                    "83696920592881808630876646630248497841",
                    "222398774077500448278032347748306936125"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-41252d4f"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_reference.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "180732622798196331058376442769797459440",
                    "120180041422769094704036984644629170480",
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "86550376920491302295992689097157695056"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-5e463905"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_gain_map.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "61839338956812325351047404333913214445",
                    "68343496404322471076860131797070672593",
                    "329218108213035680343175437730006820969",
                    "167562065648297935570025999739527902201"
                ]
            },
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "signature_version": "v1",
            "id": "ASB-A-483697751-77c568ea"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_safe_arithmetic.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "81461813203922841878122831742024887931",
                    "276136351664138248967927487420087661995",
                    "1847702133262506403628391001899871870"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-9ea0b8d6"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_ref_counted_block.cpp",
                "function": "dng_ref_counted_block::Allocate"
            },
            "deprecated": false,
            "digest": {
                "length": 211.0,
                "function_hash": "195248502907256290292332962174144833088"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-a55d4011"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_gain_map.cpp",
                "function": "dng_opcode_GainMap::ProcessArea"
            },
            "deprecated": false,
            "digest": {
                "length": 1616.0,
                "function_hash": "82152115503763350522121318660705786903"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-a6afe69e"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_reference.cpp",
                "function": "RefVignette32"
            },
            "deprecated": false,
            "digest": {
                "length": 2889.0,
                "function_hash": "263451751774552296820282662579003977281"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-af55a462"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_ref_counted_block.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284850060203403678783638611959678025405",
                    "105726039794551679729672699644156795467",
                    "94803612871059309541525442043705945904",
                    "198444163554105703719445292860677839396"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-b0632ae9"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_tag_codes.h"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "64793168968353823424173586322329498503",
                    "258322415384496364399436372668485005640",
                    "131112155313616879697633376891217030387",
                    "4356313048916928055121043342289959923"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-bd859c98"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_misc_opcodes.cpp",
                "function": "dng_opcode_MapTable::ReplicateLastEntry"
            },
            "deprecated": false,
            "digest": {
                "length": 204.0,
                "function_hash": "210822508803230862640516477016906542278"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-c3ca2640"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_misc_opcodes.cpp",
                "function": "dng_opcode_MapTable::Prepare"
            },
            "deprecated": false,
            "digest": {
                "length": 802.0,
                "function_hash": "233538589171987627072487953860181165822"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-f40e5f6e"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "source/dng_reference.cpp",
                "function": "RefBaselineMapPoly32"
            },
            "deprecated": false,
            "digest": {
                "length": 2660.0,
                "function_hash": "313748811331828243694485069609631945978"
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-fa3cac0b"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "source/dng_jxl.cpp"
            },
            "deprecated": false,
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "194429832318152120016505826279203676558",
                    "256114297949970187214891844412180836502",
                    "126444389108873037626370736066057838679",
                    "31505227870708468361139613063235033024",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "219442210747282168893588532683971211708",
                    "85544908931788701955632703061608850745",
                    "207661736324343725963447752551068749907",
                    "276372092187626204415835512964915920822",
                    "315570882488630777313555668088931810548",
                    "42397838612253038046869777970799186402",
                    "121487778604610283921976092001153757926",
                    "174609805819632958857042420636862542627",
                    "84413647751528321743776639544817495485",
                    "295188874482319381987294579900155715287",
                    "78590931651208797221447672860529396684",
                    "143006721979505065825829146571374224266",
                    "227422925747106815962237482066255730592",
                    "123588250751592434336140102503432967148",
                    "104036619412183166428666828700502158520",
                    "166350066731334231185775128133079252155",
                    "43113064109136929277896198282983880362",
                    "62729560399032003753151177338547874792",
                    "306255402335848879017979642149606896194",
                    "206064741813473267899607204872369913527",
                    "114587952181742594445164621505764163059",
                    "335223360142301931595221913703149559416",
                    "299684555834717695959764075055340107451",
                    "317401560402810940253336490682283764906",
                    "275619135883136766640627524858469777835",
                    "154920014809758925982668630656809950658",
                    "319822407134840722721406537470593128583",
                    "295188874482319381987294579900155715287",
                    "101717909466555004239119115095314325212",
                    "182991346159673447605741278042155688613",
                    "205540023405360345270807631212234794863",
                    "231657094800547934778988824746996222970",
                    "67109680556352835788841266332591309711",
                    "107925280188158659398165054380621314795",
                    "210439544695518429601874338634815575957",
                    "250729945311996511261759986883906045812",
                    "336469723182066869446259319108635005103",
                    "290895926406959072128588980902755997721",
                    "152350955531588082222995301778828533525",
                    "122505830063992593275467144068232194818",
                    "216599293977467859364267184001158243981",
                    "171970075303922421137663405972729370356",
                    "249573132650012990722417369036659330256",
                    "209133570962727105703464439188189942960",
                    "281289793643756272858872590132087322774",
                    "1908583338489184706668230269911190269",
                    "205230080967156782375349514001451635472",
                    "192319953646988717002487947259101564735",
                    "270504200679481694402294515237005447109",
                    "206068082329815097594893569480126211772",
                    "42799029976428883652400408910263596772",
                    "141929213170761095825873447457850478468",
                    "211419625495873257150473089396326343597",
                    "322068345133459123501471549468510907128",
                    "294959699935694286472385315881216102911",
                    "174763558723061786679921619698023619176",
                    "238244061299297961297816078219613386989",
                    "13381380347433866187393591900666528314",
                    "324051759526062330859468784550774260281"
                ]
            },
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/dng_sdk/+/156e7f444b15384db383b58bc48c58b8fca7fa0a",
            "id": "ASB-A-483697751-faf11a02"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-483697751.json"