ASB-A-524767048

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-524767048.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-524767048
Aliases
  • A-524767048
  • CVE-2026-55273
Published
2026-09-01T00:00:00Z
Modified
2026-09-09T15:15:54Z
Summary
[none]
Details

In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17-next:0
Fixed
17-next:2026-09-01

Affected versions

Other
17-next

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/863026ecf4f3469c0f6e45ad716ed133fbc30a77"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "191358667907535976513032057699261598049"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-524767048-735336b9",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/863026ecf4f3469c0f6e45ad716ed133fbc30a77",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor_test.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "120389771254827397326957049625073847960",
                "length": 1213
            },
            "id": "ASB-A-524767048-a22f8666",
            "match_only_versions": [
                "17-next"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/863026ecf4f3469c0f6e45ad716ed133fbc30a77",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor.cpp",
                "function": "AnnotationProcessor::AppendCommentLine"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "78531428735150899349195476226167870278",
                    "34459839345111095816774872133440709174",
                    "56083283451257659711166016935370578566",
                    "338373001798415479609287745533828316395",
                    "243331429380455706545348153347912515195",
                    "222633098033050621465297538091729889244"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-524767048-fbe3a74c",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/863026ecf4f3469c0f6e45ad716ed133fbc30a77",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor.cpp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-524767048.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16:0
Fixed
16:2026-09-01

Affected versions

Other
16

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/89513b592c1e970b78edd6445e746e06ab3afa8c"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "166284274593434220772046019675759587952",
                    "175063868346153372258523790810764408398",
                    "56083283451257659711166016935370578566",
                    "338373001798415479609287745533828316395",
                    "243331429380455706545348153347912515195",
                    "222633098033050621465297538091729889244"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-524767048-6c5d6c37",
            "match_only_versions": [
                "16"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/89513b592c1e970b78edd6445e746e06ab3afa8c",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "191358667907535976513032057699261598049"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-524767048-cffb7acc",
            "match_only_versions": [
                "16"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/89513b592c1e970b78edd6445e746e06ab3afa8c",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor_test.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "120389771254827397326957049625073847960",
                "length": 1213
            },
            "id": "ASB-A-524767048-eb8e3805",
            "match_only_versions": [
                "16"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/89513b592c1e970b78edd6445e746e06ab3afa8c",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor.cpp",
                "function": "AnnotationProcessor::AppendCommentLine"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-524767048.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
16-qpr2:0
Fixed
16-qpr2:2026-09-01

Affected versions

Other
16-qpr2

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/7dad88e20c54bdd9ad901a708af4897376c487d3"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "29575647847229898297792030693718755999",
                    "102796144138354447544785438603966387114",
                    "56083283451257659711166016935370578566",
                    "338373001798415479609287745533828316395",
                    "243331429380455706545348153347912515195",
                    "222633098033050621465297538091729889244"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-524767048-2491c475",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/7dad88e20c54bdd9ad901a708af4897376c487d3",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "120389771254827397326957049625073847960",
                "length": 1213
            },
            "id": "ASB-A-524767048-9c4e3eb6",
            "match_only_versions": [
                "16-qpr2"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/7dad88e20c54bdd9ad901a708af4897376c487d3",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor.cpp",
                "function": "AnnotationProcessor::AppendCommentLine"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "191358667907535976513032057699261598049"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-524767048-f70f9524",
            "match_only_versions": [
                "16-qpr2"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/7dad88e20c54bdd9ad901a708af4897376c487d3",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor_test.cpp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-524767048.json"

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
17:0
Fixed
17:2026-09-01

Affected versions

Other
17

Ecosystem specific 

{
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/5874a9196fefd485dcb5382198e51580a01e105a"
    ],
    "severity": "Critical",
    "spl": "2026-09-01",
    "types": [
        "EoP"
    ],
    "vanir_signatures": [
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "29575647847229898297792030693718755999",
                    "102796144138354447544785438603966387114",
                    "56083283451257659711166016935370578566",
                    "338373001798415479609287745533828316395",
                    "243331429380455706545348153347912515195",
                    "222633098033050621465297538091729889244"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-524767048-6fb41c32",
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/5874a9196fefd485dcb5382198e51580a01e105a",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor.cpp"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "function_hash": "120389771254827397326957049625073847960",
                "length": 1213
            },
            "id": "ASB-A-524767048-8dd8688a",
            "match_only_versions": [
                "17"
            ],
            "signature_type": "Function",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/5874a9196fefd485dcb5382198e51580a01e105a",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor.cpp",
                "function": "AnnotationProcessor::AppendCommentLine"
            }
        },
        {
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "191358667907535976513032057699261598049"
                ],
                "threshold": 0.9
            },
            "id": "ASB-A-524767048-93cf86b6",
            "match_only_versions": [
                "17"
            ],
            "signature_type": "Line",
            "signature_version": "v1",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/5874a9196fefd485dcb5382198e51580a01e105a",
            "target": {
                "file": "tools/aapt2/java/AnnotationProcessor_test.cpp"
            }
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/android-osv/ASB-A-524767048.json"