In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/cbb0d81bf0866a8249eca7c7ec53f7c179f8b171"
],
"severity": "Critical",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "314940485894880811648491129293487900571",
"length": 1592
},
"id": "ASB-A-513582756-1afa564b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbb0d81bf0866a8249eca7c7ec53f7c179f8b171",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "277221246370813724179016272419702950668",
"length": 2477
},
"id": "ASB-A-513582756-3c5845c7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbb0d81bf0866a8249eca7c7ec53f7c179f8b171",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentTypeParams"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"221055522953956051678101754868005301867",
"246372188126246572812188774197351161390",
"281623435956091713220251728185709768110",
"48941274909898256336905146053733671925",
"200105241365177374814096973435794357825",
"188359644950485383119335305679828308192",
"333444555279270979922390420640613509907",
"112033778006066042788205432177730319351",
"128103567233057664704687448450809305916",
"86347077202209404478728092550917754491",
"127723216770059202317310007221979593450",
"328154776566745470925053093035363262332",
"239326934292218533866360919639771866231",
"89236501579864920009527905766295369462",
"317725191553442060255613378488830928055",
"314043105192423930670971262105779970606",
"95184429457273828862464966939912107312",
"313171328178836839674964596376267951093",
"22043560488274024081961986077965828036"
],
"threshold": 0.9
},
"id": "ASB-A-513582756-cdd0ad9f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/cbb0d81bf0866a8249eca7c7ec53f7c179f8b171",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/ffbf593b30317c10dc95a9ab2a0ead09e33b9549"
],
"severity": "Critical",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "277221246370813724179016272419702950668",
"length": 2477
},
"id": "ASB-A-513582756-6e63c6ae",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/ffbf593b30317c10dc95a9ab2a0ead09e33b9549",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentTypeParams"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"221055522953956051678101754868005301867",
"246372188126246572812188774197351161390",
"281623435956091713220251728185709768110",
"48941274909898256336905146053733671925",
"200105241365177374814096973435794357825",
"188359644950485383119335305679828308192",
"333444555279270979922390420640613509907",
"112033778006066042788205432177730319351",
"128103567233057664704687448450809305916",
"86347077202209404478728092550917754491",
"127723216770059202317310007221979593450",
"328154776566745470925053093035363262332",
"239326934292218533866360919639771866231",
"89236501579864920009527905766295369462",
"317725191553442060255613378488830928055",
"314043105192423930670971262105779970606",
"95184429457273828862464966939912107312",
"313171328178836839674964596376267951093",
"22043560488274024081961986077965828036"
],
"threshold": 0.9
},
"id": "ASB-A-513582756-ce614977",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/ffbf593b30317c10dc95a9ab2a0ead09e33b9549",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "128172258089473237359508295994700672622",
"length": 1581
},
"id": "ASB-A-513582756-f0004d15",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/ffbf593b30317c10dc95a9ab2a0ead09e33b9549",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/1a78b08e5a51bd5fb285234a3b06df549560dbb2"
],
"severity": "Critical",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "277221246370813724179016272419702950668",
"length": 2477
},
"id": "ASB-A-513582756-233e717f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/1a78b08e5a51bd5fb285234a3b06df549560dbb2",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentTypeParams"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"221055522953956051678101754868005301867",
"246372188126246572812188774197351161390",
"281623435956091713220251728185709768110",
"48941274909898256336905146053733671925",
"200105241365177374814096973435794357825",
"188359644950485383119335305679828308192",
"333444555279270979922390420640613509907",
"112033778006066042788205432177730319351",
"128103567233057664704687448450809305916",
"86347077202209404478728092550917754491",
"127723216770059202317310007221979593450",
"328154776566745470925053093035363262332",
"239326934292218533866360919639771866231",
"89236501579864920009527905766295369462",
"317725191553442060255613378488830928055",
"314043105192423930670971262105779970606",
"95184429457273828862464966939912107312",
"313171328178836839674964596376267951093",
"22043560488274024081961986077965828036"
],
"threshold": 0.9
},
"id": "ASB-A-513582756-23f187eb",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/1a78b08e5a51bd5fb285234a3b06df549560dbb2",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "128172258089473237359508295994700672622",
"length": 1581
},
"id": "ASB-A-513582756-7cd2af99",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/1a78b08e5a51bd5fb285234a3b06df549560dbb2",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/818661bd29438f09ea0ae969de3a596ddab3c9a5"
],
"severity": "Critical",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "128172258089473237359508295994700672622",
"length": 1581
},
"id": "ASB-A-513582756-4bb86262",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/818661bd29438f09ea0ae969de3a596ddab3c9a5",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"221055522953956051678101754868005301867",
"246372188126246572812188774197351161390",
"281623435956091713220251728185709768110",
"48941274909898256336905146053733671925",
"200105241365177374814096973435794357825",
"188359644950485383119335305679828308192",
"333444555279270979922390420640613509907",
"112033778006066042788205432177730319351",
"128103567233057664704687448450809305916",
"86347077202209404478728092550917754491",
"127723216770059202317310007221979593450",
"328154776566745470925053093035363262332",
"239326934292218533866360919639771866231",
"89236501579864920009527905766295369462",
"317725191553442060255613378488830928055",
"314043105192423930670971262105779970606",
"95184429457273828862464966939912107312",
"313171328178836839674964596376267951093",
"22043560488274024081961986077965828036"
],
"threshold": 0.9
},
"id": "ASB-A-513582756-7145fd69",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/818661bd29438f09ea0ae969de3a596ddab3c9a5",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "277221246370813724179016272419702950668",
"length": 2477
},
"id": "ASB-A-513582756-e16c6b1c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/818661bd29438f09ea0ae969de3a596ddab3c9a5",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentTypeParams"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/937e32d05a639e88fb42b824af2b7d678bcf2b30"
],
"severity": "Critical",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "128172258089473237359508295994700672622",
"length": 1581
},
"id": "ASB-A-513582756-773ce726",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/937e32d05a639e88fb42b824af2b7d678bcf2b30",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "277221246370813724179016272419702950668",
"length": 2477
},
"id": "ASB-A-513582756-acc73f77",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/937e32d05a639e88fb42b824af2b7d678bcf2b30",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentTypeParams"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"221055522953956051678101754868005301867",
"246372188126246572812188774197351161390",
"281623435956091713220251728185709768110",
"48941274909898256336905146053733671925",
"200105241365177374814096973435794357825",
"188359644950485383119335305679828308192",
"333444555279270979922390420640613509907",
"112033778006066042788205432177730319351",
"128103567233057664704687448450809305916",
"86347077202209404478728092550917754491",
"127723216770059202317310007221979593450",
"328154776566745470925053093035363262332",
"239326934292218533866360919639771866231",
"89236501579864920009527905766295369462",
"317725191553442060255613378488830928055",
"314043105192423930670971262105779970606",
"95184429457273828862464966939912107312",
"313171328178836839674964596376267951093",
"22043560488274024081961986077965828036"
],
"threshold": 0.9
},
"id": "ASB-A-513582756-bd8b33c1",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/937e32d05a639e88fb42b824af2b7d678bcf2b30",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/fee2e475e00a5c603867030e242c188bf754ba65"
],
"severity": "Critical",
"spl": "2026-10-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "314940485894880811648491129293487900571",
"length": 1592
},
"id": "ASB-A-513582756-0fc5cb5e",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/fee2e475e00a5c603867030e242c188bf754ba65",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "277221246370813724179016272419702950668",
"length": 2477
},
"id": "ASB-A-513582756-21045089",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/fee2e475e00a5c603867030e242c188bf754ba65",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentTypeParams"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"221055522953956051678101754868005301867",
"246372188126246572812188774197351161390",
"281623435956091713220251728185709768110",
"48941274909898256336905146053733671925",
"200105241365177374814096973435794357825",
"188359644950485383119335305679828308192",
"333444555279270979922390420640613509907",
"112033778006066042788205432177730319351",
"128103567233057664704687448450809305916",
"86347077202209404478728092550917754491",
"127723216770059202317310007221979593450",
"328154776566745470925053093035363262332",
"239326934292218533866360919639771866231",
"89236501579864920009527905766295369462",
"317725191553442060255613378488830928055",
"314043105192423930670971262105779970606",
"95184429457273828862464966939912107312",
"313171328178836839674964596376267951093",
"22043560488274024081961986077965828036"
],
"threshold": 0.9
},
"id": "ASB-A-513582756-693d75bf",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/fee2e475e00a5c603867030e242c188bf754ba65",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
}
]
}