{"id":"ASB-A-391895923","details":"In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-391895923","CVE-2025-26456"],"modified":"2026-04-17T15:55:28.020024Z","published":"2025-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/art/+/1aedae6e1049aa794b3554183bf07634c8fa291b"},{"type":"FIX","url":"https://android.googlesource.com/platform/art/+/3c76194d116bad95e11bda345feaedda6c02c8b4"},{"type":"FIX","url":"https://android.googlesource.com/platform/art/+/06a99377e368b688dbeb4e6bb11b6e1dfca8bb70"}],"affected":[{"package":{"name":"platform/art","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-next:0"},{"fixed":"16-next:2025-06-01"}]}],"versions":["16-next"],"ecosystem_specific":{"spl":"2025-06-01","severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0","https://android.googlesource.com/platform/art/+/abeeacd902042cb2e4941ad66608f8bc526613d4","https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142"],"vanir_signatures":[{"id":"ASB-A-391895923-08920520","digest":{"length":81,"function_hash":"299553353509159869573557185011998636106"},"source":"https://android.googlesource.com/platform/art/+/abeeacd902042cb2e4941ad66608f8bc526613d4","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"pathExists"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-0d661c03","digest":{"length":121,"function_hash":"275431871608720134524001847305554475878"},"source":"https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"pathExists"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-0e0355a3","digest":{"length":3126,"function_hash":"62937626598064429094515536754744738950"},"source":"https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"setUp"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-1740c90f","digest":{"length":647,"function_hash":"249648057014312675203714597526919933606"},"source":"https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"addSecondaryDexUse"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-5fdf1739","digest":{"threshold":0.9,"line_hashes":["94543860069623832859978843316000753940","291194054641192588129976044323466254636","328030294175273905582049628739280480704","220645793437199142836825259284282726525","245449575711656698391507885506761708943","214428111201652202160851938288149430037","263913645955056348265201578400530291670","264400355864513340904518538732876346089","231583727746099576009044919130418065786","269056640175913739316291109257000546942","130723815597183849923584660530590790712","171629652321944879289431868290636931536","121272157897745064213469777231176901190","54025798055334898522857707900833145384","323461486084222194699375701021828394063"]},"source":"https://android.googlesource.com/platform/art/+/abeeacd902042cb2e4941ad66608f8bc526613d4","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-6784839d","digest":{"length":3330,"function_hash":"187756457512473423088725639316824366379"},"source":"https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"setUp"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-68b73ed4","digest":{"threshold":0.9,"line_hashes":["336990301467706349997244651464608568321","317165284169108821501912102978848283804","272928517208392030103892590047047860240","150588831830640555678714604901509310777","44034283766847115601134121949177572159","305519081207153531438325093701714506313","23513580319047987406463670771103448808","164219302872146538573224725596957323022","208232769371567365905389101138933161799","165126536519425582873457290095520576975","188807015852223086785189329693510974928","201901272825614035736613173409534237642","174243942391325278232546840622772064988","83384030502367181313380955619727042955","43129574426922756494884477725881291923","83127098586891353383884925585850550413","138415524260726283489235927796052297427","126254733561500118443532847490000752241","48794065108089139649049113312503897717","269525410256722887469757132755372443323","103061607395310160638587065634884869751","156083884580126286989014558042988381907","315401851344107805454170026931525484130","133291313493126263256173187938730974203","269388193677163360423441995971014730078","266006803897833490947252873498433494533","23620090979314397730903229590144663207","290588909001243261479780096351625529901","273905647135878697516241834536563840316","113454901949391092049509236838952939588","272105715645238163773319864874912236116","40235037406485617716053223503126098025","26073833694292395618452820725107674088","233874941865070704759892972054247197190","263228255430069703959574178198437393292","132091262867948287877796301726201533141","218571972811535318687997148158949323351","296890651866941796456978792986465779807"]},"source":"https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-70f31c4e","digest":{"length":1076,"function_hash":"228262016172432063790224474968006253391"},"source":"https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"addSecondaryDexUse"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-78341acf","digest":{"length":523,"function_hash":"58099342107126568692779602153918628768"},"source":"https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testInternalSecondaryDexPath"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-96b42920","digest":{"length":634,"function_hash":"185584623635308220963085662172021588769"},"source":"https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testCheckedSecondaryDexNotFound"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-a456133e","digest":{"threshold":0.9,"line_hashes":["200485123148368281770258116076868279632","12350881795632446307777177959331197868","138232501391104011704615374079305383757","50554865919037574572768049311203219134","285690183793988460692664163032356304664","44750235928440590431244313523857389054","255182489921865741717226430474273031435","288102526923679092995539757870836904785","211901171735739132332703132579920790970","182460539971431521483579646520657172981","10654695667272462295420199297276510678","121099595867807445903045262806522713070","86795767129634862298396401600325122353","221356326604606193243741983361043264118","121668248732915830279160296038500492906","18870451775600539216306293799002885646","236262182971358847705652206652305665209","146286030541729668093805215210905412767","55114727769426493051640802165533780459","25039196837365637772318333753016926945","238314555517266882008540451195632599644","128395032515159914628488386805296594581","16876290767386525483941153328978917090","43638629433148888697825685468283716018","323967419776715422283356550524471346781","176697584801695231215987403651528999635","255002633012744002964610151363401621269","229777713772947729848827538193110069681","155672489177411244165746531625220359548","248360583347851375659789556504838122171","228663860939370620914933678792545343238","94276766130688051283104899645473405855","148643490108232907572826266809131190862","329105362954898102387363477383465610287","150937712155500320174375513238374909052","207095367046529625576621597684319312298"]},"source":"https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-c132d1d5","digest":{"length":454,"function_hash":"328068064325472658298908182984982574503"},"source":"https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testNonexistingExternalSecondaryDexPath"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-ccb00346","digest":{"threshold":0.9,"line_hashes":["255205638551190901819645530516797478923","242955119628042198906581019849562757673","328543589208336430359273283465655516425","217753087070112980002303513115933811987","211315612979825855665182422034856720987","231583727746099576009044919130418065786","269056640175913739316291109257000546942","130723815597183849923584660530590790712","311506600324395775396197986357284810242","109194018135900709144637952002686430717","170050332730256088713256268599894803560","84504271732578418433826114433089949774","89863197748422552557561316345324355318","267309854935835806676018346046486626033","96238776414982220604180076405593025444","108564195631499650013550360639602242494","21813542013078623528834830066294199995","148643490108232907572826266809131190862"]},"source":"https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-dc93fc55","digest":{"threshold":0.9,"line_hashes":["246920179368425184742889956334177478561","300434166166235760881209661513561451988","172372203267334639351095012824153242023","210907713244430240045644601563421210340","295896669371220903032008196394006709500","227914724199322400007275878553342263952","12147733836908049913621754406609010501","10339080979495841751629061990847161284","41428698293212762553678004389491252336","77092719997310488594423681126751058935","332125177633054952363736516172347181410","243841962851476336183716591314325181407","246197651180854714997515174450293622994","210510349088955376612600500784663782511","58291839265245724707822121483895000475","323078065247345462156961797904860277426","100070028891851176549946914719505056379","23564602304713283158419162233450638107","159850368862483951999679417325847737864","117660126534068647570049739370568135665","292776739699687438931793260656296943100","97599160241550540476843476926830273193","155503700740545471144802345455610684316","242190389227536719299395718976678632750","101859554131030402130733253961247054397","94834674039134911944856101144678112058","249884441570758545419441519124725685969","9162182860972042307800585040333853946","324734410039052717035056707159210752072","216358991983368123864077221099141394497","171373932383633512783707124947595790344","145171597538424270412822324899064314"]},"source":"https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-e306ced4","digest":{"length":453,"function_hash":"45072792246128618471288065887810481460"},"source":"https://android.googlesource.com/platform/art/+/d62d66437f3b322f202c314672fbaf810fde7142","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testExistingExternalSecondaryDexPath"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-f49a19f7","digest":{"length":537,"function_hash":"238576455904052616332598812520474057521"},"source":"https://android.googlesource.com/platform/art/+/e29eb53ebf11fdb891762db7dd927e95a0858fc0","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"validateInputs"},"signature_type":"Function","deprecated":false,"signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-391895923.json"}},{"package":{"name":"platform/art","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-06-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2025-06-01","severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06","https://android.googlesource.com/platform/art/+/5dabc78c06b506e6b247d557157f4ab05147082b","https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc"],"vanir_signatures":[{"id":"ASB-A-391895923-1c093b30","digest":{"length":81,"function_hash":"299553353509159869573557185011998636106"},"source":"https://android.googlesource.com/platform/art/+/5dabc78c06b506e6b247d557157f4ab05147082b","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"pathExists"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-1c92110b","digest":{"length":2844,"function_hash":"295573709489165572000533141998752912775"},"source":"https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"setUp"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-1ca293e0","digest":{"length":454,"function_hash":"328068064325472658298908182984982574503"},"source":"https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testNonexistingExternalSecondaryDexPath"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-1d9be679","digest":{"length":644,"function_hash":"273509523204253499427553388766810751721"},"source":"https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"addSecondaryDexUse"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-24fdeb88","digest":{"length":453,"function_hash":"45072792246128618471288065887810481460"},"source":"https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testExistingExternalSecondaryDexPath"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-283386a1","digest":{"length":537,"function_hash":"238576455904052616332598812520474057521"},"source":"https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"validateInputs"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-2b5ead20","digest":{"threshold":0.9,"line_hashes":["246920179368425184742889956334177478561","300434166166235760881209661513561451988","172372203267334639351095012824153242023","210907713244430240045644601563421210340","137943571257848796641256803278624415758","75157731136968179402362206102189725233","280092468738813714764907231404846748316","82599498954669824694942330736718338165","176949732893622656208412396143475891559","77092719997310488594423681126751058935","332125177633054952363736516172347181410","207470678971003178086911286184033102967","312115688481984695114829403327054155255","32425353920823467734474676343492286103","43589506392469308440645341537625197279","323078065247345462156961797904860277426","100070028891851176549946914719505056379","23564602304713283158419162233450638107","159850368862483951999679417325847737864","117660126534068647570049739370568135665","292776739699687438931793260656296943100","97599160241550540476843476926830273193","155503700740545471144802345455610684316","242190389227536719299395718976678632750","101859554131030402130733253961247054397","94834674039134911944856101144678112058","249884441570758545419441519124725685969","9162182860972042307800585040333853946","324734410039052717035056707159210752072","216358991983368123864077221099141394497","171373932383633512783707124947595790344","145171597538424270412822324899064314"]},"source":"https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-46739499","digest":{"threshold":0.9,"line_hashes":["200485123148368281770258116076868279632","12350881795632446307777177959331197868","138232501391104011704615374079305383757","255182489921865741717226430474273031435","288102526923679092995539757870836904785","211901171735739132332703132579920790970","182460539971431521483579646520657172981","10654695667272462295420199297276510678","121099595867807445903045262806522713070","86795767129634862298396401600325122353","44643296132352797322588111879836481725","224504926779848771459464951366159821279","237997137506900340366559784236062522979","12538730181511590343500416470905944231","146286030541729668093805215210905412767","55114727769426493051640802165533780459","25039196837365637772318333753016926945","238314555517266882008540451195632599644","128395032515159914628488386805296594581","16876290767386525483941153328978917090","43638629433148888697825685468283716018","323967419776715422283356550524471346781","176697584801695231215987403651528999635","255002633012744002964610151363401621269","229777713772947729848827538193110069681","155672489177411244165746531625220359548","248360583347851375659789556504838122171","228663860939370620914933678792545343238","94276766130688051283104899645473405855","148643490108232907572826266809131190862","152567044227563996126353865084055883567","324842873139825397464978644670904536274","281828074789684031346703254555622928440"]},"source":"https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-496b2f9a","digest":{"length":2640,"function_hash":"141431907201761170357304221257073637542"},"source":"https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"setUp"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-49c79d27","digest":{"length":523,"function_hash":"58099342107126568692779602153918628768"},"source":"https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testInternalSecondaryDexPath"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-5c0949e1","digest":{"threshold":0.9,"line_hashes":["267180458000448794317130431845633489790","292829385474332695818876887234652648780","174606353037526087261248939122612355412","282530792743788857774403975238086018211","245449575711656698391507885506761708943","214428111201652202160851938288149430037","263913645955056348265201578400530291670","264400355864513340904518538732876346089","231583727746099576009044919130418065786","269056640175913739316291109257000546942","130723815597183849923584660530590790712","171629652321944879289431868290636931536","121272157897745064213469777231176901190","54025798055334898522857707900833145384","323461486084222194699375701021828394063"]},"source":"https://android.googlesource.com/platform/art/+/5dabc78c06b506e6b247d557157f4ab05147082b","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-6959db9f","digest":{"length":634,"function_hash":"185584623635308220963085662172021588769"},"source":"https://android.googlesource.com/platform/art/+/1edc509dcb9392cc08b23d0d26de50a9bb3aff06","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testCheckedSecondaryDexNotFound"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-6b9deadd","digest":{"length":1073,"function_hash":"82820278455054713388214593140231154229"},"source":"https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"addSecondaryDexUse"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-9bb77096","digest":{"threshold":0.9,"line_hashes":["255923694983596607443232763547775229197","247068480493375023812443363914136126940","108104311778210791992857805566338430270","52371615773571806232934324378870878955","231583727746099576009044919130418065786","269056640175913739316291109257000546942","130723815597183849923584660530590790712","311506600324395775396197986357284810242","109194018135900709144637952002686430717","170050332730256088713256268599894803560","84504271732578418433826114433089949774","89863197748422552557561316345324355318","267309854935835806676018346046486626033","96238776414982220604180076405593025444","108564195631499650013550360639602242494","21813542013078623528834830066294199995","148643490108232907572826266809131190862"]},"source":"https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-dee6b4f7","digest":{"length":121,"function_hash":"275431871608720134524001847305554475878"},"source":"https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"pathExists"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-ff9ba910","digest":{"threshold":0.9,"line_hashes":["47542920683160742393168836598120345611","317165284169108821501912102978848283804","272928517208392030103892590047047860240","150588831830640555678714604901509310777","44034283766847115601134121949177572159","305519081207153531438325093701714506313","23513580319047987406463670771103448808","164219302872146538573224725596957323022","208232769371567365905389101138933161799","165126536519425582873457290095520576975","188807015852223086785189329693510974928","201901272825614035736613173409534237642","174243942391325278232546840622772064988","83384030502367181313380955619727042955","43129574426922756494884477725881291923","83127098586891353383884925585850550413","138415524260726283489235927796052297427","126254733561500118443532847490000752241","48794065108089139649049113312503897717","269525410256722887469757132755372443323","103061607395310160638587065634884869751","156083884580126286989014558042988381907","315401851344107805454170026931525484130","133291313493126263256173187938730974203","269388193677163360423441995971014730078","266006803897833490947252873498433494533","23620090979314397730903229590144663207","290588909001243261479780096351625529901","273905647135878697516241834536563840316","113454901949391092049509236838952939588","272105715645238163773319864874912236116","40235037406485617716053223503126098025","26073833694292395618452820725107674088","233874941865070704759892972054247197190","263228255430069703959574178198437393292","132091262867948287877796301726201533141","218571972811535318687997148158949323351","296890651866941796456978792986465779807"]},"source":"https://android.googlesource.com/platform/art/+/39334253c58dedcd928ef5431ad3618b11b02edc","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-391895923.json"}},{"package":{"name":"platform/art","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-06-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2025-06-01","severity":"High","types":["DoS"],"fixes":["https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17","https://android.googlesource.com/platform/art/+/a6c55d59cee838e4dc62b92b9e931a29a37140b9","https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce"],"vanir_signatures":[{"id":"ASB-A-391895923-17f59478","digest":{"length":322,"function_hash":"29054673170634160695577513127237579168"},"source":"https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testFilteredDetailedSecondaryDexFilteredDueToNotFound"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-205c59ad","digest":{"threshold":0.9,"line_hashes":["255923694983596607443232763547775229197","247068480493375023812443363914136126940","108104311778210791992857805566338430270","52371615773571806232934324378870878955","231583727746099576009044919130418065786","279649132554763553239576922432417819578","12318033329205650438753758493793998389","321653698726800928635896197474029532730","160856827868417392990008177234609762838","170050332730256088713256268599894803560","84504271732578418433826114433089949774","89863197748422552557561316345324355318","267309854935835806676018346046486626033","96238776414982220604180076405593025444","108564195631499650013550360639602242494","21813542013078623528834830066294199995","148643490108232907572826266809131190862"]},"source":"https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-21dd2611","digest":{"length":454,"function_hash":"328068064325472658298908182984982574503"},"source":"https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testNonexistingExternalSecondaryDexPath"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-3dc99ac2","digest":{"threshold":0.9,"line_hashes":["170217590955102315129436640076146764798","12350881795632446307777177959331197868","138232501391104011704615374079305383757","255182489921865741717226430474273031435","288102526923679092995539757870836904785","211901171735739132332703132579920790970","182460539971431521483579646520657172981","10654695667272462295420199297276510678","121099595867807445903045262806522713070","86795767129634862298396401600325122353","44643296132352797322588111879836481725","224504926779848771459464951366159821279","237997137506900340366559784236062522979","12538730181511590343500416470905944231","146286030541729668093805215210905412767","55114727769426493051640802165533780459","25039196837365637772318333753016926945","238314555517266882008540451195632599644","168003966033203981044171890587363598746","229943055412142998971552297181578866223","145756402949580341469947385010477445339","289976052292454928446359732717093313132","140869341741296435513857178850342120125","275975055275954139855944439069326228425","278471894771755664457048146553763478507","148263913197149786697179840970104606302","228663860939370620914933678792545343238","94276766130688051283104899645473405855","148643490108232907572826266809131190862","65558048112254572398339100942196494920","203044786745365589644752492016732516537","142915345027217816409009941307111879549"]},"source":"https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-5534ebf2","digest":{"threshold":0.9,"line_hashes":["119723284313821438142363953253162477540","317165284169108821501912102978848283804","272928517208392030103892590047047860240","150588831830640555678714604901509310777","119586148956141779935379802031519576029","305519081207153531438325093701714506313","23513580319047987406463670771103448808","164219302872146538573224725596957323022","208232769371567365905389101138933161799","165126536519425582873457290095520576975","188807015852223086785189329693510974928","201901272825614035736613173409534237642","174243942391325278232546840622772064988","83384030502367181313380955619727042955","43129574426922756494884477725881291923","83127098586891353383884925585850550413","138415524260726283489235927796052297427","126254733561500118443532847490000752241","48794065108089139649049113312503897717","269525410256722887469757132755372443323","103061607395310160638587065634884869751","156083884580126286989014558042988381907","315401851344107805454170026931525484130","133291313493126263256173187938730974203","269388193677163360423441995971014730078","266006803897833490947252873498433494533","23620090979314397730903229590144663207","290588909001243261479780096351625529901","273905647135878697516241834536563840316","113454901949391092049509236838952939588","272105715645238163773319864874912236116","40235037406485617716053223503126098025","26073833694292395618452820725107674088","233874941865070704759892972054247197190","263228255430069703959574178198437393292","132091262867948287877796301726201533141","218571972811535318687997148158949323351","296890651866941796456978792986465779807"]},"source":"https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-5a68c71a","digest":{"threshold":0.9,"line_hashes":["246920179368425184742889956334177478561","49025061680502520548067025464014861111","331509126817414260876315283044028328453","77231307414088286668841647703964495441","247897606420639288174599437741143428274","158689142331068052617647191277720524051","10718265856934865017876710016841911379","191058040915179795571039969632256812472","45849260525745847753841400481884993987","77092719997310488594423681126751058935","332125177633054952363736516172347181410","149256874735926979443308597324025906140","179896074926556515401105230220874550466","290427759273955462742039437761986768231","275360064659256812263969039085718190573","302736476698288223624351332634030658420","296155611755737129290252174555705934045","176751836881140811965528043415643335225","102790580513275357915806628882477593492","90535323044275120267037675549401439507","173407394989770863140351713809264399327","34073020546358392786369860426142336921","213428740246424649167575477005508589498","97599160241550540476843476926830273193","130875130195140825014656541939730598046","116008578122895639233098055791962274001","170501735963008568266230579484835451990","242700071725094147505416281656097992380","80425157302806154401822695576555431144","114996004764564992387181508484359848599","22697215923606710463868990681222536718","258281255224721877063657538792273245881","181276538554369565295310407157459590351","238691440652591925217585783638279755276","145171597538424270412822324899064314"]},"source":"https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-7496641c","digest":{"length":2157,"function_hash":"311667797362775579675270490353012483965"},"source":"https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"setUp"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-776cf6aa","digest":{"length":453,"function_hash":"45072792246128618471288065887810481460"},"source":"https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testExistingExternalSecondaryDexPath"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-77dd2470","digest":{"length":644,"function_hash":"273509523204253499427553388766810751721"},"source":"https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"addSecondaryDexUse"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-a531792e","digest":{"threshold":0.9,"line_hashes":["267180458000448794317130431845633489790","292829385474332695818876887234652648780","174606353037526087261248939122612355412","282530792743788857774403975238086018211","245449575711656698391507885506761708943","214428111201652202160851938288149430037","263913645955056348265201578400530291670","264400355864513340904518538732876346089","231583727746099576009044919130418065786","279649132554763553239576922432417819578","12318033329205650438753758493793998389","171629652321944879289431868290636931536","121272157897745064213469777231176901190","54025798055334898522857707900833145384","323461486084222194699375701021828394063"]},"source":"https://android.googlesource.com/platform/art/+/a6c55d59cee838e4dc62b92b9e931a29a37140b9","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java"},"signature_type":"Line","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-a8260919","digest":{"length":121,"function_hash":"275431871608720134524001847305554475878"},"source":"https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"pathExists"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-b0e8a927","digest":{"length":523,"function_hash":"58099342107126568692779602153918628768"},"source":"https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"testInternalSecondaryDexPath"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-b8d6a5ab","digest":{"length":2361,"function_hash":"52133324725993206972741707811420643109"},"source":"https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce","target":{"file":"libartservice/service/javatests/com/android/server/art/DexUseManagerTest.java","function":"setUp"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-dabc070e","digest":{"length":1081,"function_hash":"53896047260472789398832835734470911558"},"source":"https://android.googlesource.com/platform/art/+/fc43d5255e15ddddd8b06451bc1074f7adb6e1ce","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"addSecondaryDexUse"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-e1be841d","digest":{"length":494,"function_hash":"55088197183146368341936146436632707724"},"source":"https://android.googlesource.com/platform/art/+/132fa8e145214172f0bb0f224cabf6298dba3e17","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"validateInputs"},"signature_type":"Function","deprecated":false,"signature_version":"v1"},{"id":"ASB-A-391895923-f9e34447","digest":{"length":81,"function_hash":"299553353509159869573557185011998636106"},"source":"https://android.googlesource.com/platform/art/+/a6c55d59cee838e4dc62b92b9e931a29a37140b9","target":{"file":"libartservice/service/java/com/android/server/art/DexUseManagerLocal.java","function":"pathExists"},"signature_type":"Function","deprecated":false,"signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-391895923.json"}}],"schema_version":"1.7.5"}