ASB-A-508645975

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-508645975.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-508645975
Aliases
  • A-508645975
  • CVE-2026-45531
Published
2026-09-01T00:00:00Z
Modified
2026-09-09T15:15:54Z
Summary
[none]
Details

In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/external/exfatprogs

Package

Name
platform/external/exfatprogs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/external/exfatprogs/+/2bf87d7f951961b022139fca985c0c8b5827ac94",
        "https://android.googlesource.com/platform/external/exfatprogs/+/9befb98273053c48f9b0df810090f4c88e42706a"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "239173071662298255716142812658643923587",
                    "262547171917958898942687357641403931194",
                    "19378334853622804935072833962325611255",
                    "331025459896857990530159640954809112957",
                    "906465027296410640347739555479424737",
                    "25667213137200560908221445515658269625",
                    "2577201702627207203063390374630857304",
                    "294595818912909910631384237082326157993"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-508645975-4648e27d",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/9befb98273053c48f9b0df810090f4c88e42706a",
            "target": {
                "file": "fsck/fsck.c"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "282313106796884784920013341684254475791",
                "length": 2016
            },
            "id": "ASB-A-508645975-8dc06345",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/9befb98273053c48f9b0df810090f4c88e42706a",
            "target": {
                "file": "fsck/fsck.c",
                "function": "read_boot_region"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-508645975.json"
platform/external/exfatprogs

Package

Name
platform/external/exfatprogs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-09-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/external/exfatprogs/+/ad862652cb7857d17573a38866001c8d70b69ae2",
        "https://android.googlesource.com/platform/external/exfatprogs/+/3b72fcda3398689a679cbeb7ec83c6d29d5ad647"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "276426884122515798042891153674165648095",
                "length": 1892
            },
            "id": "ASB-A-508645975-3c18335e",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/ad862652cb7857d17573a38866001c8d70b69ae2",
            "target": {
                "file": "fsck/fsck.c",
                "function": "read_boot_region"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "239173071662298255716142812658643923587",
                    "262547171917958898942687357641403931194",
                    "19378334853622804935072833962325611255",
                    "331025459896857990530159640954809112957",
                    "906465027296410640347739555479424737",
                    "119087100232855696952412457140563575036",
                    "222243598848881879505027367497757745970",
                    "118182753687192589432141294774845102710"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-508645975-91096e00",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/ad862652cb7857d17573a38866001c8d70b69ae2",
            "target": {
                "file": "fsck/fsck.c"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-508645975.json"
platform/external/exfatprogs

Package

Name
platform/external/exfatprogs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/external/exfatprogs/+/6cef2730178d874d35739927a9c587e8b8ee5555",
        "https://android.googlesource.com/platform/external/exfatprogs/+/02239bf8a11bde23b276c5201040dc3fbb22c9f7"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "276426884122515798042891153674165648095",
                "length": 1892
            },
            "id": "ASB-A-508645975-179cff34",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/02239bf8a11bde23b276c5201040dc3fbb22c9f7",
            "target": {
                "file": "fsck/fsck.c",
                "function": "read_boot_region"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "239173071662298255716142812658643923587",
                    "262547171917958898942687357641403931194",
                    "19378334853622804935072833962325611255",
                    "331025459896857990530159640954809112957",
                    "906465027296410640347739555479424737",
                    "119087100232855696952412457140563575036",
                    "222243598848881879505027367497757745970",
                    "118182753687192589432141294774845102710"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-508645975-ac525bec",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/02239bf8a11bde23b276c5201040dc3fbb22c9f7",
            "target": {
                "file": "fsck/fsck.c"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-508645975.json"
platform/external/exfatprogs

Package

Name
platform/external/exfatprogs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/external/exfatprogs/+/114dcd579fc350f989407d3f09a22a467f3c1e52",
        "https://android.googlesource.com/platform/external/exfatprogs/+/5ab69158fe0bab7bdb26ee1a71edd3c1e25fbd82"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "function_hash": "282313106796884784920013341684254475791",
                "length": 2016
            },
            "id": "ASB-A-508645975-32a409e1",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/114dcd579fc350f989407d3f09a22a467f3c1e52",
            "target": {
                "file": "fsck/fsck.c",
                "function": "read_boot_region"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "239173071662298255716142812658643923587",
                    "262547171917958898942687357641403931194",
                    "19378334853622804935072833962325611255",
                    "331025459896857990530159640954809112957",
                    "906465027296410640347739555479424737",
                    "25667213137200560908221445515658269625",
                    "2577201702627207203063390374630857304",
                    "294595818912909910631384237082326157993"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-508645975-5b7ac752",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/114dcd579fc350f989407d3f09a22a467f3c1e52",
            "target": {
                "file": "fsck/fsck.c"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-508645975.json"
platform/external/exfatprogs

Package

Name
platform/external/exfatprogs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/external/exfatprogs/+/e1d2ed8b2b05d88a9da15cfb7ab6ea259b5974ba",
        "https://android.googlesource.com/platform/external/exfatprogs/+/2582ab4da52c242e5f2004cd0d6fff39eddf6162"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "239173071662298255716142812658643923587",
                    "262547171917958898942687357641403931194",
                    "19378334853622804935072833962325611255",
                    "331025459896857990530159640954809112957",
                    "906465027296410640347739555479424737",
                    "25667213137200560908221445515658269625",
                    "2577201702627207203063390374630857304",
                    "294595818912909910631384237082326157993"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-508645975-4d8d4652",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/e1d2ed8b2b05d88a9da15cfb7ab6ea259b5974ba",
            "target": {
                "file": "fsck/fsck.c"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "282313106796884784920013341684254475791",
                "length": 2016
            },
            "id": "ASB-A-508645975-adb3edbe",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/e1d2ed8b2b05d88a9da15cfb7ab6ea259b5974ba",
            "target": {
                "file": "fsck/fsck.c",
                "function": "read_boot_region"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-508645975.json"
platform/external/exfatprogs

Package

Name
platform/external/exfatprogs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-09-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/external/exfatprogs/+/94e74b4f0f8596478919abcfbd64514c8bae82ac",
        "https://android.googlesource.com/platform/external/exfatprogs/+/b45ed26d483a804b947288f3b8aa4132ea89b92c"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "240927534968392288652672183485557265627",
                    "262547171917958898942687357641403931194",
                    "334244112117084678098761607646785449432",
                    "97752693452248825346818904821667433731",
                    "286603115447559324312163358562164610440",
                    "197916519825275386873294241838930576235",
                    "290666670051490018124488270273003858002",
                    "119087100232855696952412457140563575036",
                    "222243598848881879505027367497757745970",
                    "11735283757689884756979178790995068779"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-508645975-4a20c0d4",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/b45ed26d483a804b947288f3b8aa4132ea89b92c",
            "target": {
                "file": "fsck/fsck.c"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "244409485260179762699901976017073580001",
                "length": 1762
            },
            "id": "ASB-A-508645975-d94912bb",
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/external/exfatprogs/+/b45ed26d483a804b947288f3b8aa4132ea89b92c",
            "target": {
                "file": "fsck/fsck.c",
                "function": "read_boot_region"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-508645975.json"