In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/development/+/d72b3170cb597b52eb792d81290084fe92bf1ef9"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-0414aa87",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/d72b3170cb597b52eb792d81290084fe92bf1ef9",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "334848964155251062634198088140463209687",
"length": 2894
},
"id": "ASB-A-513581389-48013f94",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/d72b3170cb597b52eb792d81290084fe92bf1ef9",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parsePartHeaders"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/7ae2a8139ff4593459d6278fc498dd6936ed9f26"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "334848964155251062634198088140463209687",
"length": 2894
},
"id": "ASB-A-513581389-a87b1e52",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7ae2a8139ff4593459d6278fc498dd6936ed9f26",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parsePartHeaders"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-fe4bad8d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/7ae2a8139ff4593459d6278fc498dd6936ed9f26",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/development/+/421c62127bdaa7bf5ee87205cb573f5f0fdafb52"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "139209452558366853462507679697327071354",
"length": 2717
},
"id": "ASB-A-513581389-e02e5d2a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/421c62127bdaa7bf5ee87205cb573f5f0fdafb52",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parsePartHeaders"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-f2777ed2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/421c62127bdaa7bf5ee87205cb573f5f0fdafb52",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/5d64454996e013390452941ab0bda62eb8570690"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-48acb06e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5d64454996e013390452941ab0bda62eb8570690",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "139209452558366853462507679697327071354",
"length": 2717
},
"id": "ASB-A-513581389-ea427c14",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5d64454996e013390452941ab0bda62eb8570690",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parsePartHeaders"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/development/+/d0b1aee413a6ff6b9a9afe853ba78509730233ed"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-2b415f40",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/d0b1aee413a6ff6b9a9afe853ba78509730233ed",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "139209452558366853462507679697327071354",
"length": 2717
},
"id": "ASB-A-513581389-c7dabd73",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/d0b1aee413a6ff6b9a9afe853ba78509730233ed",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parsePartHeaders"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/cc7b079413126dd57cf57efeb61d3c2c1f0df08c"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-0ce6ac7c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cc7b079413126dd57cf57efeb61d3c2c1f0df08c",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "139209452558366853462507679697327071354",
"length": 2717
},
"id": "ASB-A-513581389-8c24277b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cc7b079413126dd57cf57efeb61d3c2c1f0df08c",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parsePartHeaders"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/development/+/27ef7b34479280996cc51f9ee20890efe6aa1e7e"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-86b19cac",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/27ef7b34479280996cc51f9ee20890efe6aa1e7e",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "139209452558366853462507679697327071354",
"length": 2717
},
"id": "ASB-A-513581389-e16d1f37",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/27ef7b34479280996cc51f9ee20890efe6aa1e7e",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parsePartHeaders"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/5bff1d73a66a76d7de8beb49d8207157fdff5a71"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "139209452558366853462507679697327071354",
"length": 2717
},
"id": "ASB-A-513581389-62db124c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5bff1d73a66a76d7de8beb49d8207157fdff5a71",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parsePartHeaders"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-73af98b8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/5bff1d73a66a76d7de8beb49d8207157fdff5a71",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/development/+/6e2d69a3c5360f3f70f1ce1f8e361d176a631d8c"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "139209452558366853462507679697327071354",
"length": 2717
},
"id": "ASB-A-513581389-3fe64e6f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/6e2d69a3c5360f3f70f1ce1f8e361d176a631d8c",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parsePartHeaders"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-780952e6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/6e2d69a3c5360f3f70f1ce1f8e361d176a631d8c",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/15d5a254e10047e1bbddb6b7d1de315835190387"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-4f1793c7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/15d5a254e10047e1bbddb6b7d1de315835190387",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "139209452558366853462507679697327071354",
"length": 2717
},
"id": "ASB-A-513581389-e4c01d7f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/15d5a254e10047e1bbddb6b7d1de315835190387",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parsePartHeaders"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/development/+/0528981dd39213d3a2f678f69489f667a1e4f34e"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "139209452558366853462507679697327071354",
"length": 2717
},
"id": "ASB-A-513581389-734dfb99",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/0528981dd39213d3a2f678f69489f667a1e4f34e",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parsePartHeaders"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-7869b5a6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/0528981dd39213d3a2f678f69489f667a1e4f34e",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/683ce0476b6d53e363014d91aee49f1e200a8aac"
],
"severity": "Critical",
"spl": "2026-09-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"142753661400032712952520225180075874283",
"279718015445828485956211179825455582116",
"293808198340319723335735378833586477118",
"228380082209694445135472943080580415479",
"146694696859313837855813612844997967728",
"95153332327285614191313206450219384003",
"53207138459955910017911677960981216681",
"50828770098273018613954893137366601237",
"227029905332151664031538809299041445898",
"146694696859313837855813612844997967728",
"184001240547734718021832429594969361894",
"77812751738075342271363341439217604664",
"250364202518561917982132868305756238723",
"38023406877697203983208763964391772216"
],
"threshold": 0.9
},
"id": "ASB-A-513581389-69c793a6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/683ce0476b6d53e363014d91aee49f1e200a8aac",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "139209452558366853462507679697327071354",
"length": 2717
},
"id": "ASB-A-513581389-b92c3a9d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/683ce0476b6d53e363014d91aee49f1e200a8aac",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parsePartHeaders"
}
}
]
}