In multiple locations, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/frameworks/opt/telephony/+/cdc1e39ae04a8acd1766b949dc303a190c0b2464"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"176060209331147822981950117327543394131",
"145715896189157262451483477337516501501",
"268922420144486237780134104043842790092",
"225643265713861764156389294319724252007",
"296104581362428298125222477522011924491",
"207173111238879906589203682309673813343",
"22542816414302639309674321705446783176",
"245873970994951866100467593012550262126",
"154617564728881927392288101125231573890",
"28019059242529966645766136104719726740",
"262381677811159138615493186686259121487",
"178741622456436828859862268846374381577"
],
"threshold": 0.9
},
"id": "ASB-A-517377202-1dededd7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cdc1e39ae04a8acd1766b949dc303a190c0b2464",
"target": {
"file": "src/java/com/android/internal/telephony/imsphone/ImsPhone.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "244334947864769004572123681724611242905",
"length": 1912
},
"id": "ASB-A-517377202-6c486028",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cdc1e39ae04a8acd1766b949dc303a190c0b2464",
"target": {
"file": "src/java/com/android/internal/telephony/imsphone/ImsPhone.java",
"function": "setPhoneNumberForSourceIms"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "71840651208643062316874964312315744680",
"length": 692
},
"id": "ASB-A-517377202-a7485ee3",
"match_only_versions": [
"17-qpr2-next"
],
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/cdc1e39ae04a8acd1766b949dc303a190c0b2464",
"target": {
"file": "src/java/com/android/internal/telephony/imsphone/ImsPhone.java",
"function": "extractPhoneNumberFromAssociatedUris"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Telephony/+/14ccc33232110a851412bdc5109403b3e52c5e2a"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "268356955641871120468108501681211689448",
"length": 941
},
"id": "ASB-A-517377202-4d6b715f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Telephony/+/14ccc33232110a851412bdc5109403b3e52c5e2a",
"target": {
"file": "framework/java/com/android/internal/telephony/PhoneNumberManagerService.java",
"function": "extractPhoneNumber"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"94472960835248436781198944244340519972",
"286181071979502151843705222890668237411",
"30308707279045656453488322602409719886",
"279404338444913723238001780574095623706"
],
"threshold": 0.9
},
"id": "ASB-A-517377202-7253baa7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Telephony/+/14ccc33232110a851412bdc5109403b3e52c5e2a",
"target": {
"file": "framework/java/com/android/internal/telephony/PhoneNumberManagerService.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/opt/telephony/+/f616b1e565ecafd7cfb6b57d1ae0cae3899b141f"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "55253334877931524549571385001098912036",
"length": 1677
},
"id": "ASB-A-517377202-74190e2b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/f616b1e565ecafd7cfb6b57d1ae0cae3899b141f",
"target": {
"file": "src/java/com/android/internal/telephony/imsphone/ImsPhone.java",
"function": "setPhoneNumberForSourceIms"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"176060209331147822981950117327543394131",
"145715896189157262451483477337516501501",
"268922420144486237780134104043842790092",
"225643265713861764156389294319724252007",
"296104581362428298125222477522011924491",
"207173111238879906589203682309673813343",
"22542816414302639309674321705446783176",
"245873970994951866100467593012550262126",
"154617564728881927392288101125231573890",
"28019059242529966645766136104719726740",
"262381677811159138615493186686259121487",
"178741622456436828859862268846374381577"
],
"threshold": 0.9
},
"id": "ASB-A-517377202-889da0f9",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/f616b1e565ecafd7cfb6b57d1ae0cae3899b141f",
"target": {
"file": "src/java/com/android/internal/telephony/imsphone/ImsPhone.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "71840651208643062316874964312315744680",
"length": 692
},
"id": "ASB-A-517377202-e7906247",
"match_only_versions": [
"16-qpr2"
],
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/f616b1e565ecafd7cfb6b57d1ae0cae3899b141f",
"target": {
"file": "src/java/com/android/internal/telephony/imsphone/ImsPhone.java",
"function": "extractPhoneNumberFromAssociatedUris"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Telephony/+/97932dafe5afda4889c55888751607bb4f6159f3"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "268356955641871120468108501681211689448",
"length": 941
},
"id": "ASB-A-517377202-65c06713",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Telephony/+/97932dafe5afda4889c55888751607bb4f6159f3",
"target": {
"file": "framework/java/com/android/internal/telephony/PhoneNumberManagerService.java",
"function": "extractPhoneNumber"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"94472960835248436781198944244340519972",
"286181071979502151843705222890668237411",
"30308707279045656453488322602409719886",
"279404338444913723238001780574095623706"
],
"threshold": 0.9
},
"id": "ASB-A-517377202-b6701972",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Telephony/+/97932dafe5afda4889c55888751607bb4f6159f3",
"target": {
"file": "framework/java/com/android/internal/telephony/PhoneNumberManagerService.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/opt/telephony/+/e427285170ef8741f34f41c0ac9392af7a901f5b"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "71840651208643062316874964312315744680",
"length": 692
},
"id": "ASB-A-517377202-c4389ccd",
"match_only_versions": [
"17"
],
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/e427285170ef8741f34f41c0ac9392af7a901f5b",
"target": {
"file": "src/java/com/android/internal/telephony/imsphone/ImsPhone.java",
"function": "extractPhoneNumberFromAssociatedUris"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"176060209331147822981950117327543394131",
"145715896189157262451483477337516501501",
"268922420144486237780134104043842790092",
"225643265713861764156389294319724252007",
"296104581362428298125222477522011924491",
"207173111238879906589203682309673813343",
"22542816414302639309674321705446783176",
"245873970994951866100467593012550262126",
"154617564728881927392288101125231573890",
"28019059242529966645766136104719726740",
"262381677811159138615493186686259121487",
"178741622456436828859862268846374381577"
],
"threshold": 0.9
},
"id": "ASB-A-517377202-c68a6088",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/e427285170ef8741f34f41c0ac9392af7a901f5b",
"target": {
"file": "src/java/com/android/internal/telephony/imsphone/ImsPhone.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "244334947864769004572123681724611242905",
"length": 1912
},
"id": "ASB-A-517377202-fb109d82",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/e427285170ef8741f34f41c0ac9392af7a901f5b",
"target": {
"file": "src/java/com/android/internal/telephony/imsphone/ImsPhone.java",
"function": "setPhoneNumberForSourceIms"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Telephony/+/a1c599418e5ca00c4d26db840bc5b3881dc9692f"
],
"severity": "High",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"94472960835248436781198944244340519972",
"286181071979502151843705222890668237411",
"30308707279045656453488322602409719886",
"279404338444913723238001780574095623706"
],
"threshold": 0.9
},
"id": "ASB-A-517377202-55fa56c0",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Telephony/+/a1c599418e5ca00c4d26db840bc5b3881dc9692f",
"target": {
"file": "framework/java/com/android/internal/telephony/PhoneNumberManagerService.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "268356955641871120468108501681211689448",
"length": 941
},
"id": "ASB-A-517377202-e3461fd3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Telephony/+/a1c599418e5ca00c4d26db840bc5b3881dc9692f",
"target": {
"file": "framework/java/com/android/internal/telephony/PhoneNumberManagerService.java",
"function": "extractPhoneNumber"
}
}
]
}