ASB-A-517377150

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-517377150.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-517377150
Aliases
  • A-517377150
  • CVE-2026-55265
Published
2026-10-01T00:00:00Z
Modified
2026-10-05T16:41:14Z
Summary
[none]
Details

In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android
platform/development

Package

Name
platform/development

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-10-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "316914648920727318797279992064374633436",
                    "285739975939188764889955886281720911186",
                    "202883830019296998404307437662182241630",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-2cd27a16",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-ac86bb25",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-d433e5bb",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-e8f998ab",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parseParts"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-10-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-3102709a",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parseParts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "189292235848414805027084279346301616595",
                    "7056861983714822828378052983803339987",
                    "200439674306176014353275823594484613726",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-7859222b",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-e94f05dd",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-f1cc0223",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"
platform/development

Package

Name
platform/development

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-10-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-215ce1ec",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parseParts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "316914648920727318797279992064374633436",
                    "285739975939188764889955886281720911186",
                    "202883830019296998404307437662182241630",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-76593d71",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-76c3c3e8",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-cf2ba76b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
15:0
Fixed
15:2026-10-01

Affected versions

Other
15

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-0278d654",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "189292235848414805027084279346301616595",
                    "7056861983714822828378052983803339987",
                    "200439674306176014353275823594484613726",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-40d2adc3",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-f270e250",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-ff4dc3c6",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parseParts"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"
platform/development

Package

Name
platform/development

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-10-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-3f7d37be",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-5f1e94b1",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-9fb6f350",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parseParts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "316914648920727318797279992064374633436",
                    "285739975939188764889955886281720911186",
                    "202883830019296998404307437662182241630",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-daea88a8",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-10-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-081705ac",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "189292235848414805027084279346301616595",
                    "7056861983714822828378052983803339987",
                    "200439674306176014353275823594484613726",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-16061ade",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-4f3ecf7e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parseParts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-7d977d67",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"
platform/development

Package

Name
platform/development

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-10-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "316914648920727318797279992064374633436",
                    "285739975939188764889955886281720911186",
                    "202883830019296998404307437662182241630",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-262adf6d",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-5017e467",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-aa5a6a93",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parseParts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-d4ab1367",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-10-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-2add7a24",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parseParts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "189292235848414805027084279346301616595",
                    "7056861983714822828378052983803339987",
                    "200439674306176014353275823594484613726",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-b62633b4",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-c04fa2d3",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-de333493",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"
platform/development

Package

Name
platform/development

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-10-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "316914648920727318797279992064374633436",
                    "285739975939188764889955886281720911186",
                    "202883830019296998404307437662182241630",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-6d7cbf6d",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-762a47ae",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parseParts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-d579e08b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-def50b9b",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-10-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-1aca3d8e",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parseParts"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-2a59c047",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-4486b8da",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "189292235848414805027084279346301616595",
                    "7056861983714822828378052983803339987",
                    "200439674306176014353275823594484613726",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-692dc441",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"
platform/development

Package

Name
platform/development

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-10-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "316914648920727318797279992064374633436",
                    "285739975939188764889955886281720911186",
                    "202883830019296998404307437662182241630",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-2f536dcf",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-573ada8c",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-a4b75880",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-e1f167ec",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9",
            "target":  {
                "file":  "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
                "function":  "parseParts"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"
platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
14:0
Fixed
14:2026-10-01

Affected versions

Other
14

Ecosystem specific 

{
    "fixes":  [
        "https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244"
    ],
    "severity":  "Critical",
    "spl":  "2026-10-01",
    "types":  [
        "DoS"
    ],
    "vanir_signatures":  [
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "139209452558366853462507679697327071354",
                "length":  2717
            },
            "id":  "ASB-A-517377150-7b2c0d14",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parsePartHeaders"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "307988262085666920161556929475077940110",
                "length":  221
            },
            "id":  "ASB-A-517377150-80081593",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "skipWapValue"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "line_hashes":  [
                    "115235806051313244474866949100208703067",
                    "39908776073765054527518864029502213196",
                    "275653553295305798105931955962627302090",
                    "315789821278986359943961842114991851786",
                    "273584783892463185486660509835404875994",
                    "189292235848414805027084279346301616595",
                    "7056861983714822828378052983803339987",
                    "200439674306176014353275823594484613726",
                    "193332972597265551523458097873810045930",
                    "278291187962647285066997893112381908747",
                    "2526927424068458653309312163334227701",
                    "93479104484888627398786694091720715034",
                    "212873390594843345403940431899395745769",
                    "288962015757965491310945920864062992047",
                    "37198973334187233653163172669674111813",
                    "141985895648357635255710093566769079978",
                    "133830731022674405831429499635994190490",
                    "177424558011605743484214171609036785073",
                    "308414417480901704148964930964916506416",
                    "290580744057020254864945879392239677470",
                    "66780706580694202590644247798608418592",
                    "303980660904542103297090327648050666155"
                ],
                "threshold":  0.9
            },
            "id":  "ASB-A-517377150-8c46a561",
            "signature_type":  "Line",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java"
            }
        },
        {
            "deprecated":  false,
            "digest":  {
                "function_hash":  "81903043649705649230325623504859643202",
                "length":  1968
            },
            "id":  "ASB-A-517377150-b3b18b57",
            "signature_type":  "Function",
            "signature_version":  "v1",
            "source":  "https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244",
            "target":  {
                "file":  "telephony/common/com/google/android/mms/pdu/PduParser.java",
                "function":  "parseParts"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"