In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"fixes": [
"https://android.googlesource.com/platform/development/+/96b449ebd537f20338faf8ee919fcf05acc55dda"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "212162466717132089363479495165614142073",
"length": 1385
},
"id": "ASB-A-517378147-7747d3b1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/96b449ebd537f20338faf8ee919fcf05acc55dda",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parseContentType"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"121854140715205234673495553654458523330",
"136409478165362966666182304695714260102",
"50075114396528856346053782771114903730",
"274524318765224122466007910025242301110"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-c0e0f508",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/96b449ebd537f20338faf8ee919fcf05acc55dda",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/dae26ce26b3388777225d91e931328b38f487286"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"138585907356049197651595769872137111095",
"75177937820477983286183616850905417630",
"201802036799063034230217332538066756020",
"93299189663075145488265851673479696756"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-378034a4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/dae26ce26b3388777225d91e931328b38f487286",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "128172258089473237359508295994700672622",
"length": 1581
},
"id": "ASB-A-517378147-aadb7bb6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/dae26ce26b3388777225d91e931328b38f487286",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/development/+/cca4fb311881b2da3f767380e1a9be6ade7b58c6"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"121854140715205234673495553654458523330",
"136409478165362966666182304695714260102",
"50075114396528856346053782771114903730",
"274524318765224122466007910025242301110"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-2a76a75e",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/cca4fb311881b2da3f767380e1a9be6ade7b58c6",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "212162466717132089363479495165614142073",
"length": 1385
},
"id": "ASB-A-517378147-f80401c6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/cca4fb311881b2da3f767380e1a9be6ade7b58c6",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parseContentType"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/fdd87941eefb4029c0d4675080dbb3a4584903c1"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "61383290368940746329447847865964857475",
"length": 1726
},
"id": "ASB-A-517378147-390e6ab9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/fdd87941eefb4029c0d4675080dbb3a4584903c1",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"138585907356049197651595769872137111095",
"75177937820477983286183616850905417630",
"201802036799063034230217332538066756020",
"93299189663075145488265851673479696756"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-85b4d9f6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/fdd87941eefb4029c0d4675080dbb3a4584903c1",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/development/+/e1dcb41c9e64d44d0b96d945825bfd508d502f53"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "212162466717132089363479495165614142073",
"length": 1385
},
"id": "ASB-A-517378147-9855491b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/e1dcb41c9e64d44d0b96d945825bfd508d502f53",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parseContentType"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"121854140715205234673495553654458523330",
"136409478165362966666182304695714260102",
"50075114396528856346053782771114903730",
"274524318765224122466007910025242301110"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-b8d9d979",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/e1dcb41c9e64d44d0b96d945825bfd508d502f53",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/f9abde7684ce9a94b377f5b1a046af3b099f80e4"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"138585907356049197651595769872137111095",
"75177937820477983286183616850905417630",
"201802036799063034230217332538066756020",
"93299189663075145488265851673479696756"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-142b5da3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f9abde7684ce9a94b377f5b1a046af3b099f80e4",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "61383290368940746329447847865964857475",
"length": 1726
},
"id": "ASB-A-517378147-903d55c3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/f9abde7684ce9a94b377f5b1a046af3b099f80e4",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/development/+/e58fa1093d402274dcf5b8109181e8563e73caa4"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "212162466717132089363479495165614142073",
"length": 1385
},
"id": "ASB-A-517378147-beefee79",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/e58fa1093d402274dcf5b8109181e8563e73caa4",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parseContentType"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"121854140715205234673495553654458523330",
"136409478165362966666182304695714260102",
"50075114396528856346053782771114903730",
"274524318765224122466007910025242301110"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-ebf09923",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/e58fa1093d402274dcf5b8109181e8563e73caa4",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/962cdfc819c4b52af71d69f718292a2323b9ba8a"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "61383290368940746329447847865964857475",
"length": 1726
},
"id": "ASB-A-517378147-5fa366c6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/962cdfc819c4b52af71d69f718292a2323b9ba8a",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"138585907356049197651595769872137111095",
"75177937820477983286183616850905417630",
"201802036799063034230217332538066756020",
"93299189663075145488265851673479696756"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-b6df8c2d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/962cdfc819c4b52af71d69f718292a2323b9ba8a",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/development/+/a06134dbbf732f441d187f3722a2f6d9b8df7aae"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "212162466717132089363479495165614142073",
"length": 1385
},
"id": "ASB-A-517378147-05035c0b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/a06134dbbf732f441d187f3722a2f6d9b8df7aae",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parseContentType"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"121854140715205234673495553654458523330",
"136409478165362966666182304695714260102",
"50075114396528856346053782771114903730",
"274524318765224122466007910025242301110"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-ed543828",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/a06134dbbf732f441d187f3722a2f6d9b8df7aae",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/e59262abddec59b022a647419d16d88fe4884f2c"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"138585907356049197651595769872137111095",
"75177937820477983286183616850905417630",
"201802036799063034230217332538066756020",
"93299189663075145488265851673479696756"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-34ac9fa6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e59262abddec59b022a647419d16d88fe4884f2c",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "61383290368940746329447847865964857475",
"length": 1726
},
"id": "ASB-A-517378147-3868acf1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/e59262abddec59b022a647419d16d88fe4884f2c",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/development/+/8ce355dfc3f822962189bc791f1550470e6b6f1c"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"function_hash": "212162466717132089363479495165614142073",
"length": 1385
},
"id": "ASB-A-517378147-392d5290",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/8ce355dfc3f822962189bc791f1550470e6b6f1c",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java",
"function": "parseContentType"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"121854140715205234673495553654458523330",
"136409478165362966666182304695714260102",
"50075114396528856346053782771114903730",
"274524318765224122466007910025242301110"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-662713d8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/development/+/8ce355dfc3f822962189bc791f1550470e6b6f1c",
"target": {
"file": "samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"
}
}
]
}{
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/c05472df949332cfee558b2da01c2076b62789f5"
],
"severity": "Critical",
"spl": "2026-11-01",
"types": [
"DoS"
],
"vanir_signatures": [
{
"deprecated": false,
"digest": {
"line_hashes": [
"138585907356049197651595769872137111095",
"75177937820477983286183616850905417630",
"201802036799063034230217332538066756020",
"93299189663075145488265851673479696756"
],
"threshold": 0.9
},
"id": "ASB-A-517378147-9034a1f4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c05472df949332cfee558b2da01c2076b62789f5",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "128172258089473237359508295994700672622",
"length": 1581
},
"id": "ASB-A-517378147-9d762292",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/base/+/c05472df949332cfee558b2da01c2076b62789f5",
"target": {
"file": "telephony/common/com/google/android/mms/pdu/PduParser.java",
"function": "parseContentType"
}
}
]
}