ASB-A-499091487

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-499091487.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-499091487
Aliases
  • A-499091487
  • CVE-2026-55290
Published
2026-09-01T00:00:00Z
Modified
2026-09-29T15:47:20Z
Summary
[none]
Details

In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/968cb0736ca65b22a3c7230820912adffa452b1e"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "82927214188281483027407755748785347527",
                "length":  7521
            },
            "id":  "ASB-A-499091487-812ba99d",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/968cb0736ca65b22a3c7230820912adffa452b1e",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp",
                "function":  "ResStringPool::setTo"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "88958440904460497466319070628507512145",
                    "308094730269684789193377031438851988280",
                    "149543111414257474815542172975173080566",
                    "197460429687274194980235530983418745832",
                    "160247247945018854162786087294752691740",
                    "161130232973007711014190462255313502703",
                    "64423158904939564595540958825540183875",
                    "179328279256324776839278103542427480684",
                    "267598622964433476085441998512542255931",
                    "118327174711115137808705309722244310013",
                    "104858848947964987160830302403517661649",
                    "130522839896885241388152400567527703555",
                    "66806255186088284987293822666513622897",
                    "96896572782832791328411877253452490085",
                    "200945432685477963557656037427954248813",
                    "123927014082303466244311091545631431393",
                    "258909741659923299611219088770757843110",
                    "239393316848012953757523240799303122435",
                    "183896264587861673598148935309463180915",
                    "160604242386151727215178653780606597400",
                    "210949481534006291668838556491400974916",
                    "337814240897319559102765744692188941287",
                    "185491210705835820856068630844988561431",
                    "113412598032795088045255255379303606215",
                    "306572923216154041055704698458741029683",
                    "146292951287316629006329247049540378873",
                    "332327962866772784024985154157400931817"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-499091487-b26d9327",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/968cb0736ca65b22a3c7230820912adffa452b1e",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-09-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/fd6d49e8bfcc4c42e380e01baf6e186c33916bcb"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "88958440904460497466319070628507512145",
                    "308094730269684789193377031438851988280",
                    "149543111414257474815542172975173080566",
                    "197460429687274194980235530983418745832",
                    "160247247945018854162786087294752691740",
                    "161130232973007711014190462255313502703",
                    "64423158904939564595540958825540183875",
                    "179328279256324776839278103542427480684",
                    "267598622964433476085441998512542255931",
                    "118327174711115137808705309722244310013",
                    "104858848947964987160830302403517661649",
                    "130522839896885241388152400567527703555",
                    "66806255186088284987293822666513622897",
                    "96896572782832791328411877253452490085",
                    "200945432685477963557656037427954248813",
                    "123927014082303466244311091545631431393",
                    "258909741659923299611219088770757843110",
                    "239393316848012953757523240799303122435",
                    "183896264587861673598148935309463180915",
                    "160604242386151727215178653780606597400",
                    "210949481534006291668838556491400974916",
                    "337814240897319559102765744692188941287",
                    "185491210705835820856068630844988561431",
                    "113412598032795088045255255379303606215",
                    "306572923216154041055704698458741029683",
                    "146292951287316629006329247049540378873",
                    "332327962866772784024985154157400931817"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-499091487-2831ab10",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/fd6d49e8bfcc4c42e380e01baf6e186c33916bcb",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "82927214188281483027407755748785347527",
                "length":  7521
            },
            "id":  "ASB-A-499091487-fa55ad7c",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/fd6d49e8bfcc4c42e380e01baf6e186c33916bcb",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp",
                "function":  "ResStringPool::setTo"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/f4a6d1160920868b9ba354f84023e39371a8c2ba"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "82927214188281483027407755748785347527",
                "length":  7521
            },
            "id":  "ASB-A-499091487-023aadd5",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/f4a6d1160920868b9ba354f84023e39371a8c2ba",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp",
                "function":  "ResStringPool::setTo"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "88958440904460497466319070628507512145",
                    "308094730269684789193377031438851988280",
                    "149543111414257474815542172975173080566",
                    "197460429687274194980235530983418745832",
                    "160247247945018854162786087294752691740",
                    "161130232973007711014190462255313502703",
                    "64423158904939564595540958825540183875",
                    "179328279256324776839278103542427480684",
                    "267598622964433476085441998512542255931",
                    "118327174711115137808705309722244310013",
                    "104858848947964987160830302403517661649",
                    "130522839896885241388152400567527703555",
                    "66806255186088284987293822666513622897",
                    "96896572782832791328411877253452490085",
                    "200945432685477963557656037427954248813",
                    "123927014082303466244311091545631431393",
                    "258909741659923299611219088770757843110",
                    "239393316848012953757523240799303122435",
                    "183896264587861673598148935309463180915",
                    "160604242386151727215178653780606597400",
                    "210949481534006291668838556491400974916",
                    "337814240897319559102765744692188941287",
                    "185491210705835820856068630844988561431",
                    "113412598032795088045255255379303606215",
                    "306572923216154041055704698458741029683",
                    "146292951287316629006329247049540378873",
                    "332327962866772784024985154157400931817"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-499091487-d134417b",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/f4a6d1160920868b9ba354f84023e39371a8c2ba",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/42e2f10a060bc130317e8e7f6bb7a146575938d6"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "82927214188281483027407755748785347527",
                "length":  7521
            },
            "id":  "ASB-A-499091487-989b50c8",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/42e2f10a060bc130317e8e7f6bb7a146575938d6",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp",
                "function":  "ResStringPool::setTo"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "88958440904460497466319070628507512145",
                    "308094730269684789193377031438851988280",
                    "149543111414257474815542172975173080566",
                    "197460429687274194980235530983418745832",
                    "160247247945018854162786087294752691740",
                    "161130232973007711014190462255313502703",
                    "64423158904939564595540958825540183875",
                    "179328279256324776839278103542427480684",
                    "267598622964433476085441998512542255931",
                    "118327174711115137808705309722244310013",
                    "104858848947964987160830302403517661649",
                    "130522839896885241388152400567527703555",
                    "66806255186088284987293822666513622897",
                    "96896572782832791328411877253452490085",
                    "200945432685477963557656037427954248813",
                    "123927014082303466244311091545631431393",
                    "258909741659923299611219088770757843110",
                    "239393316848012953757523240799303122435",
                    "183896264587861673598148935309463180915",
                    "160604242386151727215178653780606597400",
                    "210949481534006291668838556491400974916",
                    "337814240897319559102765744692188941287",
                    "185491210705835820856068630844988561431",
                    "113412598032795088045255255379303606215",
                    "306572923216154041055704698458741029683",
                    "146292951287316629006329247049540378873",
                    "332327962866772784024985154157400931817"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-499091487-b9ae7da1",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/42e2f10a060bc130317e8e7f6bb7a146575938d6",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/0aa6ef39a4277197f1a216904fcb8e1c034c4299"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "88958440904460497466319070628507512145",
                    "308094730269684789193377031438851988280",
                    "149543111414257474815542172975173080566",
                    "197460429687274194980235530983418745832",
                    "160247247945018854162786087294752691740",
                    "161130232973007711014190462255313502703",
                    "64423158904939564595540958825540183875",
                    "179328279256324776839278103542427480684",
                    "267598622964433476085441998512542255931",
                    "118327174711115137808705309722244310013",
                    "104858848947964987160830302403517661649",
                    "130522839896885241388152400567527703555",
                    "66806255186088284987293822666513622897",
                    "96896572782832791328411877253452490085",
                    "200945432685477963557656037427954248813",
                    "123927014082303466244311091545631431393",
                    "258909741659923299611219088770757843110",
                    "239393316848012953757523240799303122435",
                    "183896264587861673598148935309463180915",
                    "160604242386151727215178653780606597400",
                    "210949481534006291668838556491400974916",
                    "337814240897319559102765744692188941287",
                    "185491210705835820856068630844988561431",
                    "113412598032795088045255255379303606215",
                    "306572923216154041055704698458741029683",
                    "146292951287316629006329247049540378873",
                    "332327962866772784024985154157400931817"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-499091487-05b84fe7",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0aa6ef39a4277197f1a216904fcb8e1c034c4299",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "82927214188281483027407755748785347527",
                "length":  7521
            },
            "id":  "ASB-A-499091487-787ac51a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/0aa6ef39a4277197f1a216904fcb8e1c034c4299",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp",
                "function":  "ResStringPool::setTo"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-09-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/72a322b401716222debbb8bd94e87ed805939224"
    ],
    "severity":  "High",
    "spl":  "2026-09-01",
    "types":  [
        "ID"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "249077544555284930475303052642442529713",
                "length":  7292
            },
            "id":  "ASB-A-499091487-376d790a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/72a322b401716222debbb8bd94e87ed805939224",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp",
                "function":  "ResStringPool::setTo"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "88958440904460497466319070628507512145",
                    "308094730269684789193377031438851988280",
                    "149543111414257474815542172975173080566",
                    "197460429687274194980235530983418745832",
                    "160247247945018854162786087294752691740",
                    "161130232973007711014190462255313502703",
                    "64423158904939564595540958825540183875",
                    "179328279256324776839278103542427480684",
                    "267598622964433476085441998512542255931",
                    "118327174711115137808705309722244310013",
                    "104858848947964987160830302403517661649",
                    "130522839896885241388152400567527703555",
                    "66806255186088284987293822666513622897",
                    "96896572782832791328411877253452490085",
                    "200945432685477963557656037427954248813",
                    "123927014082303466244311091545631431393",
                    "258909741659923299611219088770757843110",
                    "239393316848012953757523240799303122435",
                    "183896264587861673598148935309463180915",
                    "160604242386151727215178653780606597400",
                    "210949481534006291668838556491400974916",
                    "337814240897319559102765744692188941287",
                    "185491210705835820856068630844988561431",
                    "113412598032795088045255255379303606215",
                    "306572923216154041055704698458741029683",
                    "146292951287316629006329247049540378873",
                    "332327962866772784024985154157400931817"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-499091487-3a6c16a1",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/72a322b401716222debbb8bd94e87ed805939224",
            "target":  {
                "file":  "libs/androidfw/ResourceTypes.cpp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"