{"id":"ASB-A-416259832","details":"In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-416259832","CVE-2025-48603"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2025-12-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2025-12-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/b4c6786312a217ad9dfd97041b2f1e2f77e39b94"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2-next:0"},{"fixed":"16-qpr2-next:2025-12-01"}]}],"versions":["16-qpr2-next"],"ecosystem_specific":{"severity":"High","spl":"2025-12-01","types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/5e31d9c067f0ef88848dfc16aff66fabc53bd638","target":{"file":"core/java/android/view/inputmethod/InputMethodInfo.java"},"deprecated":false,"digest":{"line_hashes":["312775793928733375048403279979899896709","320516439701229709620610102836578327916","24943489758215494939458249242976086800","225579985887653641479618923416191264617","302126789327002282224664998017469985454","330606813865672487230694839134060801879","280458708223532231840046614001678081455","91669783225971474884237707944169528469","35797891605720894951246669560834080609","203806384724473649681571720224085836205","167239798223898691065626160679430491574","283564095416796908385708385779120705158","322779700565649224970003520730233128842","168583688539381858254418563131668962155","306763741114392225018152507924516647742","255571796439040682883146532505589069626","187074443976747679220687355281211363395","294838234241834513287600405004757900301","284832347438650248446724679920342558725","339596659654306373097428442182164030389","189704945377289551719637592938076131669","11257697894793854799160152638029231186","313650761420819531709047905775899963996","74176445016353105248038706302593673655"],"threshold":0.9},"id":"ASB-A-416259832-aa60c057","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":6315,"function_hash":"28356626192793094800501630674322785970"},"id":"ASB-A-416259832-f87171ba","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5e31d9c067f0ef88848dfc16aff66fabc53bd638","target":{"function":"InputMethodInfo","file":"core/java/android/view/inputmethod/InputMethodInfo.java"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5e31d9c067f0ef88848dfc16aff66fabc53bd638"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-416259832.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2025-12-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/b417c7c9102e5510da35dbfc771eab3fe1dc670d"],"severity":"High","spl":"2025-12-01","types":["DoS"],"vanir_signatures":[{"id":"ASB-A-416259832-3939340c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b417c7c9102e5510da35dbfc771eab3fe1dc670d","target":{"file":"core/java/android/view/inputmethod/InputMethodInfo.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["312775793928733375048403279979899896709","320516439701229709620610102836578327916","24943489758215494939458249242976086800","225579985887653641479618923416191264617","302126789327002282224664998017469985454","330606813865672487230694839134060801879","280458708223532231840046614001678081455","91669783225971474884237707944169528469","35797891605720894951246669560834080609","203806384724473649681571720224085836205","167239798223898691065626160679430491574","283564095416796908385708385779120705158","322779700565649224970003520730233128842","168583688539381858254418563131668962155","306763741114392225018152507924516647742","255571796439040682883146532505589069626","187074443976747679220687355281211363395","294838234241834513287600405004757900301","284832347438650248446724679920342558725","339596659654306373097428442182164030389","189704945377289551719637592938076131669","11257697894793854799160152638029231186","313650761420819531709047905775899963996","74176445016353105248038706302593673655"]}},{"id":"ASB-A-416259832-c4010c5e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/b417c7c9102e5510da35dbfc771eab3fe1dc670d","target":{"file":"core/java/android/view/inputmethod/InputMethodInfo.java","function":"InputMethodInfo"},"deprecated":false,"digest":{"function_hash":"28356626192793094800501630674322785970","length":6315}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-416259832.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2025-12-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c5640ed624f4e5388bd25b7910474d4eebfdfc2a"],"severity":"High","spl":"2025-12-01","types":["DoS"],"vanir_signatures":[{"id":"ASB-A-416259832-ec8f178f","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c5640ed624f4e5388bd25b7910474d4eebfdfc2a","target":{"file":"core/java/android/view/inputmethod/InputMethodInfo.java"},"deprecated":false,"digest":{"line_hashes":["312775793928733375048403279979899896709","320516439701229709620610102836578327916","24943489758215494939458249242976086800","225579985887653641479618923416191264617","302126789327002282224664998017469985454","330606813865672487230694839134060801879","280458708223532231840046614001678081455","91669783225971474884237707944169528469","35797891605720894951246669560834080609","203806384724473649681571720224085836205","167239798223898691065626160679430491574","283564095416796908385708385779120705158","322779700565649224970003520730233128842","168583688539381858254418563131668962155","306763741114392225018152507924516647742","255571796439040682883146532505589069626","187074443976747679220687355281211363395","294838234241834513287600405004757900301","284832347438650248446724679920342558725","339596659654306373097428442182164030389","189704945377289551719637592938076131669","11257697894793854799160152638029231186","313650761420819531709047905775899963996","74176445016353105248038706302593673655"],"threshold":0.9}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c5640ed624f4e5388bd25b7910474d4eebfdfc2a","target":{"file":"core/java/android/view/inputmethod/InputMethodInfo.java","function":"InputMethodInfo"},"deprecated":false,"digest":{"function_hash":"28356626192793094800501630674322785970","length":6315},"id":"ASB-A-416259832-f961987c","signature_type":"Function"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-416259832.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13:0"},{"fixed":"13:2025-12-01"}]}],"versions":["13"],"ecosystem_specific":{"severity":"High","spl":"2025-12-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9b3d15b327bc579f68fed2abf42332d2109a36b9","target":{"file":"core/java/android/view/inputmethod/InputMethodInfo.java","function":"InputMethodInfo"},"deprecated":false,"digest":{"function_hash":"84701541600284753292829922089629855862","length":4977},"id":"ASB-A-416259832-36db5192","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["224368646116529125510308914497862445851","182632555549413327304340748554840449209","36823171062785144686004458995036615294","199478206947803978089377739612196812312","302126789327002282224664998017469985454","330606813865672487230694839134060801879","123507770211255993651813289831972339760","297200061576079952970853024181584376006","204175817182894702582920483800463691848","126682899244027050039981385379860268699","74096199367053915691735868889316057000","283564095416796908385708385779120705158","322779700565649224970003520730233128842","168583688539381858254418563131668962155","306763741114392225018152507924516647742","255571796439040682883146532505589069626","187074443976747679220687355281211363395","294838234241834513287600405004757900301","284832347438650248446724679920342558725","339596659654306373097428442182164030389","189704945377289551719637592938076131669","149237808642807534634578169088551616933","205286730261416736360518831494767686654","76522177718807367695449626168015599677"]},"id":"ASB-A-416259832-b7164032","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9b3d15b327bc579f68fed2abf42332d2109a36b9","target":{"file":"core/java/android/view/inputmethod/InputMethodInfo.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9b3d15b327bc579f68fed2abf42332d2109a36b9"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-416259832.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2025-12-01"}]}],"versions":["14"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"target":{"file":"core/java/android/view/inputmethod/InputMethodInfo.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["312775793928733375048403279979899896709","320516439701229709620610102836578327916","24943489758215494939458249242976086800","225579985887653641479618923416191264617","302126789327002282224664998017469985454","330606813865672487230694839134060801879","123507770211255993651813289831972339760","297200061576079952970853024181584376006","35797891605720894951246669560834080609","203806384724473649681571720224085836205","74096199367053915691735868889316057000","283564095416796908385708385779120705158","322779700565649224970003520730233128842","168583688539381858254418563131668962155","306763741114392225018152507924516647742","255571796439040682883146532505589069626","187074443976747679220687355281211363395","294838234241834513287600405004757900301","284832347438650248446724679920342558725","339596659654306373097428442182164030389","189704945377289551719637592938076131669","85193412839537088904486511867596481361","179033180906823720092900513519100873115","254632921853906159389682386119083561031"]},"id":"ASB-A-416259832-b4a0c8de","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/33e0101c0b920886afb0c94d5a8166bd3c0ad05a"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/33e0101c0b920886afb0c94d5a8166bd3c0ad05a","target":{"file":"core/java/android/view/inputmethod/InputMethodInfo.java","function":"InputMethodInfo"},"deprecated":false,"digest":{"function_hash":"242742550785476793746439189871526631815","length":5732},"id":"ASB-A-416259832-c321535e"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/33e0101c0b920886afb0c94d5a8166bd3c0ad05a"],"severity":"High","spl":"2025-12-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-416259832.json"}}],"schema_version":"1.9.0"}