{"id":"ASB-A-266580022","details":"In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-266580022","CVE-2023-21253"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2023-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-10-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/84df68840b6f2407146e722ebd95a7d8bc6e3529"},{"type":"FIX","url":"https://android.googlesource.com/platform/tools/apksig/+/039f815895f62c9f8af23df66622b66246f3f61e"},{"type":"FIX","url":"https://android.googlesource.com/platform/tools/apksig/+/41d882324288085fd32ae0bb70dc85f5fd0e2be7"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2023-10-01"}]}],"versions":["14-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597"],"severity":"High","spl":"2023-10-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/jar/StrictJarVerifier.java","function":"readCertificates"},"deprecated":false,"digest":{"function_hash":"249915354582923191798266077908697072256","length":345},"id":"ASB-A-266580022-202659be","signature_type":"Function"},{"digest":{"length":1375,"function_hash":"76378410095532720956002145985191073570"},"id":"ASB-A-266580022-25e19998","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"function":"verify","file":"core/java/android/util/apk/ApkSignatureSchemeV2Verifier.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/apk/ApkSignatureSchemeV2Verifier.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["127591183906428000100661990238153668826","240609319350722928473919306482041019539","291486844225277494726308172124066601464","119807339177862674962200230646681423358","9564776611380162473768305298920529708","187258210791204064424156638109163959388","311698033013677502681369731221858027212"]},"id":"ASB-A-266580022-30e18f3b"},{"deprecated":false,"digest":{"line_hashes":["129744209502793915813260619052832012600","264113637825344716206162844253084270500","30215904757720273077659302057981667921","299631063491229373266064701101652182332","237790250428028202705881335151452949033","39096619547947512736311842163264836793","265640756765803956838572199192976623552","267676677489576409428264675310911676797","200840196954250196286453188352233489228","119046298690815096111332514719412588051"],"threshold":0.9},"id":"ASB-A-266580022-3fd3dd04","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/jar/StrictJarVerifier.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-266580022.json"}},{"package":{"name":"platform/tools/apksig","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14-next:0"},{"fixed":"14-next:2023-10-01"}]}],"versions":["14-next"],"ecosystem_specific":{"severity":"High","spl":"2023-10-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeSigner.java","function":"generateApkSignatureSchemeV2Block"},"deprecated":false,"digest":{"function_hash":"213318869695566115113803252493268411376","length":726},"id":"ASB-A-266580022-48a1aade","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeSigner.java"},"deprecated":false,"digest":{"line_hashes":["12618301161831551205318197541620737508","98755959483069616998261581973137485491","90902607722267191119850184141701387206","320695860838695213398059869796611028816","156083528888115917432528088227340568869"],"threshold":0.9},"id":"ASB-A-266580022-51c47a48","signature_type":"Line"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeSigner.java"},"deprecated":false,"digest":{"line_hashes":["90172167375156212023865176702410805323","255828293149117205601751866485063807101","283147441159775087592892492815682190961","281741627391602248632793172452235808643","161160446596792945093007825717673037311","224284982970141525191405149060650164069","281423487149610749286690012279529074670","329054542011880781089773095494031838405"],"threshold":0.9},"id":"ASB-A-266580022-54b753dc"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeVerifier.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["166308627250241798830278720308157210028","204021523883075718267869134804624054837","293949540968280903538352693917672011553","125492843029688495070507629923640435993","310355743575466778701922714034586285378"]},"id":"ASB-A-266580022-7f72a0a9","signature_type":"Line"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["318259293619017571817674845858708848436","127079537267571699098745376265682096815","139115357152174844383564699394576699834"]},"id":"ASB-A-266580022-ac369905","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/Constants.java"}},{"target":{"function":"sign","file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeSigner.java"},"deprecated":false,"digest":{"length":433,"function_hash":"22470244999601055631616563743597494561"},"id":"ASB-A-266580022-b1490b3a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6"},{"id":"ASB-A-266580022-bc81e2f0","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeVerifier.java"},"deprecated":false,"digest":{"line_hashes":["138091845747979162666087952714147299396","251139346529762752694104483570799064211","199102190805175363047783006961641316782","160564518559890903662277250347960425158","14955106898394308134487221076974122598"],"threshold":0.9}},{"target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeVerifier.java","function":"parseSigners"},"deprecated":false,"digest":{"function_hash":"222328988143613824287965131789779771686","length":991},"id":"ASB-A-266580022-d4e4922e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6"},{"deprecated":false,"digest":{"line_hashes":["195323898097579571440473038818311772522","85927087583516576559657909816730739506","126594930388151554529098213431576280383","257815311357202562710622069557207829188","33966035226034354764799743487013125884","213804718474314383533809336886931483632"],"threshold":0.9},"id":"ASB-A-266580022-d5c71974","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/ApkVerifier.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeVerifier.java","function":"verify"},"deprecated":false,"digest":{"length":3495,"function_hash":"262962228558343875874916341515667901288"},"id":"ASB-A-266580022-f5a38546","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-266580022.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-10-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/apk/ApkSignatureSchemeV2Verifier.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["127591183906428000100661990238153668826","240609319350722928473919306482041019539","291486844225277494726308172124066601464","119807339177862674962200230646681423358","9564776611380162473768305298920529708","187258210791204064424156638109163959388","311698033013677502681369731221858027212"]},"id":"ASB-A-266580022-26d2a5b7","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/jar/StrictJarVerifier.java"},"deprecated":false,"digest":{"line_hashes":["129744209502793915813260619052832012600","264113637825344716206162844253084270500","30215904757720273077659302057981667921","299631063491229373266064701101652182332","237790250428028202705881335151452949033","39096619547947512736311842163264836793","265640756765803956838572199192976623552","267676677489576409428264675310911676797","200840196954250196286453188352233489228","119046298690815096111332514719412588051"],"threshold":0.9},"id":"ASB-A-266580022-781cbf9d","signature_type":"Line"},{"digest":{"function_hash":"249915354582923191798266077908697072256","length":345},"id":"ASB-A-266580022-d847131d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"function":"readCertificates","file":"core/java/android/util/jar/StrictJarVerifier.java"},"deprecated":false},{"digest":{"function_hash":"76378410095532720956002145985191073570","length":1375},"id":"ASB-A-266580022-e1982cab","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/apk/ApkSignatureSchemeV2Verifier.java","function":"verify"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597"],"severity":"High","spl":"2023-10-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-266580022.json"}},{"package":{"name":"platform/tools/apksig","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-10-01"}]}],"versions":["11"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["166308627250241798830278720308157210028","204021523883075718267869134804624054837","293949540968280903538352693917672011553","125492843029688495070507629923640435993","310355743575466778701922714034586285378"]},"id":"ASB-A-266580022-08d66403","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/080e4039aeeca5d0ed55049dcfd3915e4d649239","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeVerifier.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/080e4039aeeca5d0ed55049dcfd3915e4d649239","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeVerifier.java","function":"parseSigners"},"deprecated":false,"digest":{"function_hash":"222328988143613824287965131789779771686","length":991},"id":"ASB-A-266580022-4ebe82aa"},{"deprecated":false,"digest":{"function_hash":"22470244999601055631616563743597494561","length":433},"id":"ASB-A-266580022-5edc31c2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/080e4039aeeca5d0ed55049dcfd3915e4d649239","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeSigner.java","function":"sign"}},{"id":"ASB-A-266580022-76928673","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/080e4039aeeca5d0ed55049dcfd3915e4d649239","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeVerifier.java","function":"verify"},"deprecated":false,"digest":{"function_hash":"333444367386528009047836502053223450042","length":3475}},{"source":"https://android.googlesource.com/platform/tools/apksig/+/080e4039aeeca5d0ed55049dcfd3915e4d649239","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeSigner.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["90172167375156212023865176702410805323","255828293149117205601751866485063807101","283147441159775087592892492815682190961","281741627391602248632793172452235808643","161160446596792945093007825717673037311","19318538246823043399536733526229174470","339695200048526063472714976939320224941","117245178116164655333834700469779125972"]},"id":"ASB-A-266580022-947541b1","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/080e4039aeeca5d0ed55049dcfd3915e4d649239","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeSigner.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["37533447064962364212589698078441805597","98755959483069616998261581973137485491","90902607722267191119850184141701387206","320695860838695213398059869796611028816","156083528888115917432528088227340568869"]},"id":"ASB-A-266580022-bbcae137","signature_type":"Line"},{"id":"ASB-A-266580022-cdd30be9","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/080e4039aeeca5d0ed55049dcfd3915e4d649239","target":{"file":"src/main/java/com/android/apksig/ApkVerifier.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["47428040235981702453145689256894068721","12672754703303928234164998712563517569","8610655643251529581441854087647599748","249434984663158798916763270884250273655","195323898097579571440473038818311772522","85927087583516576559657909816730739506","126594930388151554529098213431576280383","257815311357202562710622069557207829188","33966035226034354764799743487013125884","213804718474314383533809336886931483632"]}},{"deprecated":false,"digest":{"function_hash":"87843026847037016839933472380593091061","length":612},"id":"ASB-A-266580022-d45a768e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/080e4039aeeca5d0ed55049dcfd3915e4d649239","target":{"function":"generateApkSignatureSchemeV2Block","file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeSigner.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/080e4039aeeca5d0ed55049dcfd3915e4d649239","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeVerifier.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["138091845747979162666087952714147299396","251139346529762752694104483570799064211","199102190805175363047783006961641316782","160564518559890903662277250347960425158","14955106898394308134487221076974122598"]},"id":"ASB-A-266580022-de1d0fc3"},{"id":"ASB-A-266580022-fe6d3c49","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/080e4039aeeca5d0ed55049dcfd3915e4d649239","target":{"file":"src/main/java/com/android/apksig/ApkVerifier.java","function":"mergeFrom"},"deprecated":false,"digest":{"function_hash":"220020544393900911384356231346521659494","length":1169}}],"fixes":["https://android.googlesource.com/platform/tools/apksig/+/080e4039aeeca5d0ed55049dcfd3915e4d649239"],"severity":"High","spl":"2023-10-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-266580022.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-10-01"}]}],"versions":["12"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597"],"severity":"High","spl":"2023-10-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/apk/ApkSignatureSchemeV2Verifier.java"},"deprecated":false,"digest":{"line_hashes":["127591183906428000100661990238153668826","240609319350722928473919306482041019539","291486844225277494726308172124066601464","119807339177862674962200230646681423358","9564776611380162473768305298920529708","187258210791204064424156638109163959388","311698033013677502681369731221858027212"],"threshold":0.9},"id":"ASB-A-266580022-2dffb6d8","signature_type":"Line"},{"target":{"function":"readCertificates","file":"core/java/android/util/jar/StrictJarVerifier.java"},"deprecated":false,"digest":{"function_hash":"249915354582923191798266077908697072256","length":345},"id":"ASB-A-266580022-62ba78f6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/apk/ApkSignatureSchemeV2Verifier.java","function":"verify"},"deprecated":false,"digest":{"function_hash":"76378410095532720956002145985191073570","length":1375},"id":"ASB-A-266580022-7d3cb9ae","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/jar/StrictJarVerifier.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["129744209502793915813260619052832012600","264113637825344716206162844253084270500","30215904757720273077659302057981667921","299631063491229373266064701101652182332","237790250428028202705881335151452949033","39096619547947512736311842163264836793","265640756765803956838572199192976623552","267676677489576409428264675310911676797","200840196954250196286453188352233489228","119046298690815096111332514719412588051"]},"id":"ASB-A-266580022-939c829d","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-266580022.json"}},{"package":{"name":"platform/tools/apksig","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-10-01"}]}],"versions":["12"],"ecosystem_specific":{"spl":"2023-10-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeVerifier.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["166308627250241798830278720308157210028","204021523883075718267869134804624054837","293949540968280903538352693917672011553","125492843029688495070507629923640435993","310355743575466778701922714034586285378"]},"id":"ASB-A-266580022-38ae67da","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/Constants.java"},"deprecated":false,"digest":{"line_hashes":["83835231554199575221028493457154853768","187526407930162239029248123558231366877","139115357152174844383564699394576699834"],"threshold":0.9},"id":"ASB-A-266580022-413fe738","signature_type":"Line"},{"target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeVerifier.java"},"deprecated":false,"digest":{"line_hashes":["138091845747979162666087952714147299396","251139346529762752694104483570799064211","199102190805175363047783006961641316782","160564518559890903662277250347960425158","14955106898394308134487221076974122598"],"threshold":0.9},"id":"ASB-A-266580022-57b1d910","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac"},{"digest":{"function_hash":"114059583829668587052886837139387282040","length":632},"id":"ASB-A-266580022-5b0e97b8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"function":"generateApkSignatureSchemeV2Block","file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeSigner.java"},"deprecated":false},{"digest":{"length":991,"function_hash":"222328988143613824287965131789779771686"},"id":"ASB-A-266580022-82e25833","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeVerifier.java","function":"parseSigners"},"deprecated":false},{"target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeSigner.java","function":"sign"},"deprecated":false,"digest":{"function_hash":"22470244999601055631616563743597494561","length":433},"id":"ASB-A-266580022-99a609ef","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeSigner.java"},"deprecated":false,"digest":{"line_hashes":["37533447064962364212589698078441805597","98755959483069616998261581973137485491","90902607722267191119850184141701387206","320695860838695213398059869796611028816","156083528888115917432528088227340568869"],"threshold":0.9},"id":"ASB-A-266580022-ac1266e9","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/ApkVerifier.java","function":"mergeFrom"},"deprecated":false,"digest":{"function_hash":"59115683397571627065104435808932691233","length":1075},"id":"ASB-A-266580022-b17e6b25"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/ApkVerifier.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["166660708084919229288884510559300593615","12672754703303928234164998712563517569","8610655643251529581441854087647599748","249434984663158798916763270884250273655","195323898097579571440473038818311772522","85927087583516576559657909816730739506","126594930388151554529098213431576280383","257815311357202562710622069557207829188","33966035226034354764799743487013125884","213804718474314383533809336886931483632"]},"id":"ASB-A-266580022-b4868a3c","signature_type":"Line"},{"digest":{"line_hashes":["90172167375156212023865176702410805323","255828293149117205601751866485063807101","283147441159775087592892492815682190961","281741627391602248632793172452235808643","161160446596792945093007825717673037311","19318538246823043399536733526229174470","339695200048526063472714976939320224941","117245178116164655333834700469779125972"],"threshold":0.9},"id":"ASB-A-266580022-ea78f0ff","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeSigner.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeVerifier.java","function":"verify"},"deprecated":false,"digest":{"function_hash":"262962228558343875874916341515667901288","length":3495},"id":"ASB-A-266580022-f39328b0"}],"fixes":["https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-266580022.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-10-01"}]}],"versions":["12L"],"ecosystem_specific":{"spl":"2023-10-01","types":["DoS"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/jar/StrictJarVerifier.java"},"deprecated":false,"digest":{"line_hashes":["129744209502793915813260619052832012600","264113637825344716206162844253084270500","30215904757720273077659302057981667921","299631063491229373266064701101652182332","237790250428028202705881335151452949033","39096619547947512736311842163264836793","265640756765803956838572199192976623552","267676677489576409428264675310911676797","200840196954250196286453188352233489228","119046298690815096111332514719412588051"],"threshold":0.9},"id":"ASB-A-266580022-41403806"},{"deprecated":false,"digest":{"function_hash":"249915354582923191798266077908697072256","length":345},"id":"ASB-A-266580022-52f0a788","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/jar/StrictJarVerifier.java","function":"readCertificates"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["127591183906428000100661990238153668826","240609319350722928473919306482041019539","291486844225277494726308172124066601464","119807339177862674962200230646681423358","9564776611380162473768305298920529708","187258210791204064424156638109163959388","311698033013677502681369731221858027212"]},"id":"ASB-A-266580022-58a326c2","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/apk/ApkSignatureSchemeV2Verifier.java"}},{"target":{"file":"core/java/android/util/apk/ApkSignatureSchemeV2Verifier.java","function":"verify"},"deprecated":false,"digest":{"function_hash":"76378410095532720956002145985191073570","length":1375},"id":"ASB-A-266580022-5e42fe1a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-266580022.json"}},{"package":{"name":"platform/tools/apksig","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12L:0"},{"fixed":"12L:2023-10-01"}]}],"versions":["12L"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-266580022-43be5085","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeSigner.java"},"deprecated":false,"digest":{"line_hashes":["37533447064962364212589698078441805597","98755959483069616998261581973137485491","90902607722267191119850184141701387206","320695860838695213398059869796611028816","156083528888115917432528088227340568869"],"threshold":0.9}},{"source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"function":"sign","file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeSigner.java"},"deprecated":false,"digest":{"function_hash":"22470244999601055631616563743597494561","length":433},"id":"ASB-A-266580022-578205df","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"59115683397571627065104435808932691233","length":1075},"id":"ASB-A-266580022-5f8b084b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/ApkVerifier.java","function":"mergeFrom"},"deprecated":false},{"id":"ASB-A-266580022-62e4fb30","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeVerifier.java"},"deprecated":false,"digest":{"line_hashes":["138091845747979162666087952714147299396","251139346529762752694104483570799064211","199102190805175363047783006961641316782","160564518559890903662277250347960425158","14955106898394308134487221076974122598"],"threshold":0.9}},{"source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeSigner.java"},"deprecated":false,"digest":{"line_hashes":["90172167375156212023865176702410805323","255828293149117205601751866485063807101","283147441159775087592892492815682190961","281741627391602248632793172452235808643","161160446596792945093007825717673037311","19318538246823043399536733526229174470","339695200048526063472714976939320224941","117245178116164655333834700469779125972"],"threshold":0.9},"id":"ASB-A-266580022-672f0d32","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-266580022-7984f14e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeVerifier.java","function":"verify"},"deprecated":false,"digest":{"function_hash":"262962228558343875874916341515667901288","length":3495}},{"target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeSigner.java","function":"generateApkSignatureSchemeV2Block"},"deprecated":false,"digest":{"length":632,"function_hash":"114059583829668587052886837139387282040"},"id":"ASB-A-266580022-7a25ca3b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac"},{"id":"ASB-A-266580022-94c22bc5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/Constants.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["83835231554199575221028493457154853768","187526407930162239029248123558231366877","139115357152174844383564699394576699834"]}},{"target":{"function":"parseSigners","file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeVerifier.java"},"deprecated":false,"digest":{"length":991,"function_hash":"222328988143613824287965131789779771686"},"id":"ASB-A-266580022-a5aebea3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac"},{"digest":{"line_hashes":["166660708084919229288884510559300593615","12672754703303928234164998712563517569","8610655643251529581441854087647599748","249434984663158798916763270884250273655","195323898097579571440473038818311772522","85927087583516576559657909816730739506","126594930388151554529098213431576280383","257815311357202562710622069557207829188","33966035226034354764799743487013125884","213804718474314383533809336886931483632"],"threshold":0.9},"id":"ASB-A-266580022-cf4326bc","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/ApkVerifier.java"},"deprecated":false},{"digest":{"line_hashes":["166308627250241798830278720308157210028","204021523883075718267869134804624054837","293949540968280903538352693917672011553","125492843029688495070507629923640435993","310355743575466778701922714034586285378"],"threshold":0.9},"id":"ASB-A-266580022-e9923eca","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeVerifier.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/tools/apksig/+/dae412630054cc9ec19ec03e0e827585e619f6ac"],"severity":"High","spl":"2023-10-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-266580022.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-10-01"}]}],"versions":["13"],"ecosystem_specific":{"spl":"2023-10-01","types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/apk/ApkSignatureSchemeV2Verifier.java"},"deprecated":false,"digest":{"line_hashes":["127591183906428000100661990238153668826","240609319350722928473919306482041019539","291486844225277494726308172124066601464","119807339177862674962200230646681423358","9564776611380162473768305298920529708","187258210791204064424156638109163959388","311698033013677502681369731221858027212"],"threshold":0.9},"id":"ASB-A-266580022-15af2d2b","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"249915354582923191798266077908697072256","length":345},"id":"ASB-A-266580022-298ab3f0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/jar/StrictJarVerifier.java","function":"readCertificates"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597","target":{"file":"core/java/android/util/apk/ApkSignatureSchemeV2Verifier.java","function":"verify"},"deprecated":false,"digest":{"function_hash":"76378410095532720956002145985191073570","length":1375},"id":"ASB-A-266580022-56ef6703"},{"target":{"file":"core/java/android/util/jar/StrictJarVerifier.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["129744209502793915813260619052832012600","264113637825344716206162844253084270500","30215904757720273077659302057981667921","299631063491229373266064701101652182332","237790250428028202705881335151452949033","39096619547947512736311842163264836793","265640756765803956838572199192976623552","267676677489576409428264675310911676797","200840196954250196286453188352233489228","119046298690815096111332514719412588051"]},"id":"ASB-A-266580022-aa02e7bf","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/6f6ee8a55f37c2b8c0df041b2bd53ec928764597"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-266580022.json"}},{"package":{"name":"platform/tools/apksig","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2023-10-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","spl":"2023-10-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"222328988143613824287965131789779771686","length":991},"id":"ASB-A-266580022-00c5b830","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeVerifier.java","function":"parseSigners"}},{"digest":{"threshold":0.9,"line_hashes":["195323898097579571440473038818311772522","85927087583516576559657909816730739506","126594930388151554529098213431576280383","257815311357202562710622069557207829188","33966035226034354764799743487013125884","213804718474314383533809336886931483632"]},"id":"ASB-A-266580022-07a97c2a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/ApkVerifier.java"},"deprecated":false},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["138091845747979162666087952714147299396","251139346529762752694104483570799064211","199102190805175363047783006961641316782","160564518559890903662277250347960425158","14955106898394308134487221076974122598"]},"id":"ASB-A-266580022-229c07d8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeVerifier.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"function":"generateApkSignatureSchemeV2Block","file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeSigner.java"},"deprecated":false,"digest":{"length":726,"function_hash":"213318869695566115113803252493268411376"},"id":"ASB-A-266580022-233bef49"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["318259293619017571817674845858708848436","127079537267571699098745376265682096815","139115357152174844383564699394576699834"]},"id":"ASB-A-266580022-373ced3e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/Constants.java"}},{"id":"ASB-A-266580022-5069b810","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeVerifier.java","function":"verify"},"deprecated":false,"digest":{"function_hash":"262962228558343875874916341515667901288","length":3495}},{"deprecated":false,"digest":{"length":433,"function_hash":"22470244999601055631616563743597494561"},"id":"ASB-A-266580022-5868a7c5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"function":"sign","file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeSigner.java"}},{"id":"ASB-A-266580022-99859c46","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeSigner.java"},"deprecated":false,"digest":{"line_hashes":["90172167375156212023865176702410805323","255828293149117205601751866485063807101","283147441159775087592892492815682190961","281741627391602248632793172452235808643","161160446596792945093007825717673037311","224284982970141525191405149060650164069","281423487149610749286690012279529074670","329054542011880781089773095494031838405"],"threshold":0.9}},{"id":"ASB-A-266580022-d0743968","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v2/V2SchemeVerifier.java"},"deprecated":false,"digest":{"line_hashes":["166308627250241798830278720308157210028","204021523883075718267869134804624054837","293949540968280903538352693917672011553","125492843029688495070507629923640435993","310355743575466778701922714034586285378"],"threshold":0.9}},{"id":"ASB-A-266580022-e94d13ba","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6","target":{"file":"src/main/java/com/android/apksig/internal/apk/v1/V1SchemeSigner.java"},"deprecated":false,"digest":{"line_hashes":["12618301161831551205318197541620737508","98755959483069616998261581973137485491","90902607722267191119850184141701387206","320695860838695213398059869796611028816","156083528888115917432528088227340568869"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/tools/apksig/+/0b086bdc130e1e6216fcbc5436fe8e3cdc9ec011","https://android.googlesource.com/platform/tools/apksig/+/6be64b9339c1dad28abf75b53d3866fd42f320d6"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-266580022.json"}}],"schema_version":"1.9.0"}