ASB-A-503554490

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-503554490.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-503554490
Aliases
  • A-503554490
  • CVE-2026-49921
Published
2026-09-01T00:00:00Z
Modified
2026-09-08T15:39:03Z
Summary
[none]
Details

In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c38eeeb203a54d22ebe14199ac0b236948e69064"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "263258161404672070354835000126997956318",
                    "286073883733398392203333469617757995545",
                    "142870057710055416845193739172940759066",
                    "229391551805715688910960747639623510853",
                    "220086062369584072016123623157333565185",
                    "200166588462115431209164279838638810003",
                    "118675035969470875691698001258344689440",
                    "196397554091563918306736600340077638282",
                    "327489235795846531318800550669625621004",
                    "242232691045715220341114087536277457003",
                    "189490682715295410216549109004269641949",
                    "327340805419733784566242861534748971391",
                    "278343524028516306628022552530714800688",
                    "286073883733398392203333469617757995545",
                    "142870057710055416845193739172940759066",
                    "229391551805715688910960747639623510853",
                    "277633809543710935370534086615126785810",
                    "141903307031223326876418671125241188448",
                    "50591981945024207983349191871523612049",
                    "196397554091563918306736600340077638282",
                    "327489235795846531318800550669625621004",
                    "242232691045715220341114087536277457003",
                    "189490682715295410216549109004269641949",
                    "327340805419733784566242861534748971391"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-40b88eaa",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c38eeeb203a54d22ebe14199ac0b236948e69064",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "234885848374535616936072549726664038565",
                "length": 7514
            },
            "id": "ASB-A-503554490-9887ec9e",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c38eeeb203a54d22ebe14199ac0b236948e69064",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_search_attr_req"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "136411140000534985871501883715446998120",
                    "211480513380587768097981217369359198465",
                    "94159063913853366670655820121131539144",
                    "85052081892092952809031721787755978210",
                    "114561483752064732313635644762498894786",
                    "103095061920323215659805094796302902474",
                    "252105161683310911531424257663425706206",
                    "340227863801121340250344059018028085486",
                    "65028502749842873289307810133389538135",
                    "219219332391922087659732804999926220856",
                    "184114347374865059411638871785893099337",
                    "267316580119348924232546368181599720809",
                    "268659090969300418706832165707815783037",
                    "161029387423189416387955832115053886503",
                    "117449845397578017788637215180639692136"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-c185b8e8",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c38eeeb203a54d22ebe14199ac0b236948e69064",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "152984548421205108607126746409707379180",
                    "67125878575480373639067785115271513747",
                    "19354413197191747332224386493158570045",
                    "76475838350346482640076259045487308124",
                    "196739352192374664946085146928275649664",
                    "248324360414604610531423217861373184105",
                    "82786177349793358798232120589741212794",
                    "51474573369935403212811648414820221023",
                    "77852236051653898087934837106799130528"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-d4093997",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c38eeeb203a54d22ebe14199ac0b236948e69064",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "314117344066530375169921459321285041097",
                "length": 5914
            },
            "id": "ASB-A-503554490-da058f11",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c38eeeb203a54d22ebe14199ac0b236948e69064",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_attr_req"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "261238699076207367670021994188690922622",
                "length": 568
            },
            "id": "ASB-A-503554490-e26cca46",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c38eeeb203a54d22ebe14199ac0b236948e69064",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc",
                "function": "sdpu_build_partial_attrib_entry"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "99188638674473644034414010673927175518",
                "length": 1797
            },
            "id": "ASB-A-503554490-f6d9740d",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c38eeeb203a54d22ebe14199ac0b236948e69064",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc",
                "function": "sdp_add_attribute_to_record"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-503554490.json"
platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-09-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8ee95735c56efb7f6fccc8a6d54bd802fbca64ad"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "140582920804477162131706058902769784525",
                    "168395069138291551343309580071571299279",
                    "273976772223420996057702807590596969684",
                    "309339834953472127076101827137482652026",
                    "129663536898343476434615019378454297249",
                    "30747798920766633713644375442241003442",
                    "85052081892092952809031721787755978210",
                    "114561483752064732313635644762498894786",
                    "103095061920323215659805094796302902474",
                    "151045349073073221090497711207658864874",
                    "340004629455897115230972897461504585819",
                    "295849840430511634428805876566108329382",
                    "175578526750305992748113022879065640445",
                    "130518366246431133232671613838102731191",
                    "254223205264525468513126635208458991542",
                    "320700094285453258603774353543049463898",
                    "25572739056594362502034425432415090713",
                    "58972174123234803203990725428639213964",
                    "140567046766136931136564413616795489389"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-00cb1f46",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8ee95735c56efb7f6fccc8a6d54bd802fbca64ad",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "115986560552768005616207720076933768198",
                "length": 1784
            },
            "id": "ASB-A-503554490-3dd0d55b",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8ee95735c56efb7f6fccc8a6d54bd802fbca64ad",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc",
                "function": "SDP_AddAttributeToRecord"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "62982951657898317115880487844722120163",
                "length": 5997
            },
            "id": "ASB-A-503554490-65269940",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8ee95735c56efb7f6fccc8a6d54bd802fbca64ad",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_attr_req"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "89986087176679570256764576802182876198",
                    "108672602733510301676503615242229545618",
                    "80824573831542258658961118917893681417",
                    "17501979789197792165727035437540688136",
                    "89986087176679570256764576802182876198",
                    "108672602733510301676503615242229545618",
                    "80824573831542258658961118917893681417",
                    "17501979789197792165727035437540688136"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-999303cb",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8ee95735c56efb7f6fccc8a6d54bd802fbca64ad",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "18228748365034568519048646909793778377",
                "length": 7952
            },
            "id": "ASB-A-503554490-c2492a6d",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8ee95735c56efb7f6fccc8a6d54bd802fbca64ad",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_search_attr_req"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "177076557020881669418574865019980852434",
                    "164546894177767381228790967713655056075",
                    "224812021535066557660482664023350554103",
                    "143867958052912392363645129833588196052",
                    "327308261191970771365786865470389816237",
                    "196739352192374664946085146928275649664",
                    "248324360414604610531423217861373184105"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-cf355883",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8ee95735c56efb7f6fccc8a6d54bd802fbca64ad",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "60658119105790715368710994014133526886",
                "length": 547
            },
            "id": "ASB-A-503554490-dbb7d095",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/8ee95735c56efb7f6fccc8a6d54bd802fbca64ad",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc",
                "function": "sdpu_build_partial_attrib_entry"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-503554490.json"
platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/328d9f310670024588c70cfec24e0aa63f091916"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "152984548421205108607126746409707379180",
                    "67125878575480373639067785115271513747",
                    "19354413197191747332224386493158570045",
                    "76475838350346482640076259045487308124",
                    "196739352192374664946085146928275649664",
                    "248324360414604610531423217861373184105"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-09640059",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/328d9f310670024588c70cfec24e0aa63f091916",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "140582920804477162131706058902769784525",
                    "94159063913853366670655820121131539144",
                    "85052081892092952809031721787755978210",
                    "114561483752064732313635644762498894786",
                    "103095061920323215659805094796302902474",
                    "97797857902226106350311961140343958415",
                    "340227863801121340250344059018028085486",
                    "319883127366648362965212840329766741700",
                    "182705975665437208818241378369919641025",
                    "249118135281327476487651125855312850066",
                    "328404197912343133669709979515160875923",
                    "268659090969300418706832165707815783037",
                    "161029387423189416387955832115053886503",
                    "117449845397578017788637215180639692136"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-1140bc03",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/328d9f310670024588c70cfec24e0aa63f091916",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "89986087176679570256764576802182876198",
                    "108672602733510301676503615242229545618",
                    "80824573831542258658961118917893681417",
                    "208049027615488659730756652774104452441",
                    "89986087176679570256764576802182876198",
                    "108672602733510301676503615242229545618",
                    "80824573831542258658961118917893681417",
                    "128014514232553943311233796575871659168"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-677b4040",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/328d9f310670024588c70cfec24e0aa63f091916",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "225504442713293245101116892079626328748",
                "length": 7526
            },
            "id": "ASB-A-503554490-7c35c1c7",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/328d9f310670024588c70cfec24e0aa63f091916",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_search_attr_req"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "261238699076207367670021994188690922622",
                "length": 568
            },
            "id": "ASB-A-503554490-d60b34d2",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/328d9f310670024588c70cfec24e0aa63f091916",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc",
                "function": "sdpu_build_partial_attrib_entry"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "186888907320538434918260538478926198112",
                "length": 1781
            },
            "id": "ASB-A-503554490-d799b554",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/328d9f310670024588c70cfec24e0aa63f091916",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc",
                "function": "SDP_AddAttributeToRecord"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "141654186388903997156414433464583454342",
                "length": 5815
            },
            "id": "ASB-A-503554490-e2f2bb75",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/328d9f310670024588c70cfec24e0aa63f091916",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_attr_req"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-503554490.json"
platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c10c85eb25247127316d8a8580b229b9a167ea0d"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "186888907320538434918260538478926198112",
                "length": 1781
            },
            "id": "ASB-A-503554490-12e7daab",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c10c85eb25247127316d8a8580b229b9a167ea0d",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc",
                "function": "SDP_AddAttributeToRecord"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "140582920804477162131706058902769784525",
                    "94159063913853366670655820121131539144",
                    "85052081892092952809031721787755978210",
                    "114561483752064732313635644762498894786",
                    "103095061920323215659805094796302902474",
                    "97797857902226106350311961140343958415",
                    "340227863801121340250344059018028085486",
                    "319883127366648362965212840329766741700",
                    "182705975665437208818241378369919641025",
                    "249118135281327476487651125855312850066",
                    "328404197912343133669709979515160875923",
                    "268659090969300418706832165707815783037",
                    "161029387423189416387955832115053886503",
                    "117449845397578017788637215180639692136"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-36439afd",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c10c85eb25247127316d8a8580b229b9a167ea0d",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "152984548421205108607126746409707379180",
                    "67125878575480373639067785115271513747",
                    "19354413197191747332224386493158570045",
                    "76475838350346482640076259045487308124",
                    "196739352192374664946085146928275649664",
                    "248324360414604610531423217861373184105"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-434b4db3",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c10c85eb25247127316d8a8580b229b9a167ea0d",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "141654186388903997156414433464583454342",
                "length": 5815
            },
            "id": "ASB-A-503554490-52909e3b",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c10c85eb25247127316d8a8580b229b9a167ea0d",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_attr_req"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "261238699076207367670021994188690922622",
                "length": 568
            },
            "id": "ASB-A-503554490-99e1323b",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c10c85eb25247127316d8a8580b229b9a167ea0d",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc",
                "function": "sdpu_build_partial_attrib_entry"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "225504442713293245101116892079626328748",
                "length": 7526
            },
            "id": "ASB-A-503554490-d70a9f1f",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c10c85eb25247127316d8a8580b229b9a167ea0d",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_search_attr_req"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "89986087176679570256764576802182876198",
                    "108672602733510301676503615242229545618",
                    "80824573831542258658961118917893681417",
                    "208049027615488659730756652774104452441",
                    "89986087176679570256764576802182876198",
                    "108672602733510301676503615242229545618",
                    "80824573831542258658961118917893681417",
                    "128014514232553943311233796575871659168"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-d8c95c8d",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c10c85eb25247127316d8a8580b229b9a167ea0d",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-503554490.json"
platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c1d49c08a28fb8ee5cec829b88d89eeb7690c02c"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "28719396827640647553232273974062578087",
                "length": 5901
            },
            "id": "ASB-A-503554490-1a5a000f",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c1d49c08a28fb8ee5cec829b88d89eeb7690c02c",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_attr_req"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "89986087176679570256764576802182876198",
                    "108672602733510301676503615242229545618",
                    "295226549750972571973848647813112124097",
                    "145564485145822202949363143502298841721",
                    "89986087176679570256764576802182876198",
                    "108672602733510301676503615242229545618",
                    "295226549750972571973848647813112124097",
                    "92451342082462957530895232051640881201"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-5ab45999",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c1d49c08a28fb8ee5cec829b88d89eeb7690c02c",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "261238699076207367670021994188690922622",
                "length": 568
            },
            "id": "ASB-A-503554490-5dabaafe",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c1d49c08a28fb8ee5cec829b88d89eeb7690c02c",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc",
                "function": "sdpu_build_partial_attrib_entry"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "299871481786130306510114155340658804947",
                "length": 7514
            },
            "id": "ASB-A-503554490-6ba495f7",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c1d49c08a28fb8ee5cec829b88d89eeb7690c02c",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_search_attr_req"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "152984548421205108607126746409707379180",
                    "67125878575480373639067785115271513747",
                    "19354413197191747332224386493158570045",
                    "76475838350346482640076259045487308124",
                    "196739352192374664946085146928275649664",
                    "248324360414604610531423217861373184105"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-7aa1df57",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c1d49c08a28fb8ee5cec829b88d89eeb7690c02c",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "136411140000534985871501883715446998120",
                    "211480513380587768097981217369359198465",
                    "94159063913853366670655820121131539144",
                    "85052081892092952809031721787755978210",
                    "114561483752064732313635644762498894786",
                    "103095061920323215659805094796302902474",
                    "252105161683310911531424257663425706206",
                    "340227863801121340250344059018028085486",
                    "65028502749842873289307810133389538135",
                    "219219332391922087659732804999926220856",
                    "184114347374865059411638871785893099337",
                    "267316580119348924232546368181599720809",
                    "268659090969300418706832165707815783037",
                    "161029387423189416387955832115053886503",
                    "117449845397578017788637215180639692136"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-7b5b1495",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c1d49c08a28fb8ee5cec829b88d89eeb7690c02c",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "99188638674473644034414010673927175518",
                "length": 1797
            },
            "id": "ASB-A-503554490-879b3c9c",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c1d49c08a28fb8ee5cec829b88d89eeb7690c02c",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc",
                "function": "sdp_add_attribute_to_record"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-503554490.json"
platform/packages/modules/Bluetooth

Package

Name
platform/packages/modules/Bluetooth

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-09-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c2d4c12f9dd5de060762ff0c77bf3229db883581"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "RCE"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "188226397717774017530657014932458847622",
                "length": 1774
            },
            "id": "ASB-A-503554490-01a8dbc4",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c2d4c12f9dd5de060762ff0c77bf3229db883581",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc",
                "function": "SDP_AddAttributeToRecord"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "177076557020881669418574865019980852434",
                    "164546894177767381228790967713655056075",
                    "224812021535066557660482664023350554103",
                    "143867958052912392363645129833588196052",
                    "327308261191970771365786865470389816237",
                    "17474718125859463924046400733463547625",
                    "324521502422696703333358405757445599592",
                    "18475008813300488680658311627734011276",
                    "8215691711856239288120214358283640589",
                    "95145866748793088531120643684139064672",
                    "283970815996365241133283721748947163401"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-18233abd",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c2d4c12f9dd5de060762ff0c77bf3229db883581",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "192049176591038848967162864843621584123",
                "length": 557
            },
            "id": "ASB-A-503554490-5c8a2074",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c2d4c12f9dd5de060762ff0c77bf3229db883581",
            "target": {
                "file": "system/stack/sdp/sdp_utils.cc",
                "function": "sdpu_build_partial_attrib_entry"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "196267995599077268202812686217909157689",
                "length": 5828
            },
            "id": "ASB-A-503554490-aab254ae",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c2d4c12f9dd5de060762ff0c77bf3229db883581",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_attr_req"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "229305574549420969257601133250635632801",
                    "85052081892092952809031721787755978210",
                    "114561483752064732313635644762498894786",
                    "149349687962253041135612852708276310424",
                    "90628358796567841429714613407010770994",
                    "340004629455897115230972897461504585819",
                    "161430526914939909563841409594178226156",
                    "116459529061672362777008383549690899343",
                    "130959754178631034440500818573467281590",
                    "70676344951464396012699257530275509257",
                    "205145102171309089636027498310804890695",
                    "25572739056594362502034425432415090713",
                    "58972174123234803203990725428639213964",
                    "140567046766136931136564413616795489389"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-b0174516",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c2d4c12f9dd5de060762ff0c77bf3229db883581",
            "target": {
                "file": "system/stack/sdp/sdp_db.cc"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "334455017998130250944167705445505273184",
                "length": 7768
            },
            "id": "ASB-A-503554490-edaf9c47",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c2d4c12f9dd5de060762ff0c77bf3229db883581",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc",
                "function": "process_service_search_attr_req"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "263258161404672070354835000126997956318",
                    "286073883733398392203333469617757995545",
                    "142870057710055416845193739172940759066",
                    "309498739534825861961567600451064374296",
                    "141331153389118714442178364732785279494",
                    "70840464245989132129824756560204896362",
                    "253816339498959980837666779144133220075",
                    "260539390203630259521872383321603145995",
                    "174744419893929087621749583597379576818",
                    "255501708111771071032150658079919912330",
                    "170500731702028464758269898805151398050",
                    "189490682715295410216549109004269641949",
                    "327340805419733784566242861534748971391",
                    "278343524028516306628022552530714800688",
                    "286073883733398392203333469617757995545",
                    "142870057710055416845193739172940759066",
                    "309498739534825861961567600451064374296",
                    "141331153389118714442178364732785279494",
                    "70840464245989132129824756560204896362",
                    "253816339498959980837666779144133220075",
                    "260539390203630259521872383321603145995",
                    "174744419893929087621749583597379576818",
                    "255501708111771071032150658079919912330",
                    "170500731702028464758269898805151398050",
                    "189490682715295410216549109004269641949",
                    "327340805419733784566242861534748971391"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-503554490-f9fa575d",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/packages/modules/Bluetooth/+/c2d4c12f9dd5de060762ff0c77bf3229db883581",
            "target": {
                "file": "system/stack/sdp/sdp_server.cc"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-503554490.json"