{"id":"ASB-A-425360073","details":"In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-425360073","CVE-2025-48587"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2026-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Profiling/+/ceaaf1330d3a0697e52691d223ee700824a5b4fa"}],"affected":[{"package":{"name":"platform/packages/modules/Profiling","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2-next:0"},{"fixed":"16-qpr2-next:2026-03-01"}]}],"versions":["16-qpr2-next"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/e57d3597f0eb2e0bdabbf174cf57b41caee0627a","target":{"file":"service/java/com/android/os/profiling/ProfilingService.java","function":"loadAppTriggersFromPersistedData"},"deprecated":false,"digest":{"function_hash":"104628925764997369973307367249319994152","length":1531},"id":"ASB-A-425360073-4cd9fc6d","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["140980351542841865322874667206116268233","212112380952491241971394349394802320028","43038151300178774547995806109245907378","180523832217444172169222380602873127213","307927668931008622988596837867476833904","257523563587753747335333235819692878160","324845346487321138674729793356086715422","297110464572594597890543167437134563738","148800993958335204571843429349796923238","305906586449176453846815912992275736011"],"threshold":0.9},"id":"ASB-A-425360073-6a2788a0","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/e57d3597f0eb2e0bdabbf174cf57b41caee0627a","target":{"file":"service/java/com/android/os/profiling/ProfilingService.java"}},{"target":{"function":"addTrigger","file":"service/java/com/android/os/profiling/ProfilingService.java"},"deprecated":false,"digest":{"function_hash":"138831073507716754240349632171874470092","length":466},"id":"ASB-A-425360073-8532e694","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/e57d3597f0eb2e0bdabbf174cf57b41caee0627a"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Profiling/+/e57d3597f0eb2e0bdabbf174cf57b41caee0627a"],"severity":"High","spl":"2026-03-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-425360073.json"}},{"package":{"name":"platform/packages/modules/Profiling","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-03-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Profiling/+/57d3f4da1ff871e18db8795fb2dd2e9857422884"],"severity":"High","spl":"2026-03-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/57d3f4da1ff871e18db8795fb2dd2e9857422884","target":{"file":"service/java/com/android/os/profiling/ProfilingService.java","function":"loadAppTriggersFromPersistedData"},"deprecated":false,"digest":{"length":1531,"function_hash":"104628925764997369973307367249319994152"},"id":"ASB-A-425360073-8d8c5876","signature_type":"Function"},{"id":"ASB-A-425360073-e402c69f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/57d3f4da1ff871e18db8795fb2dd2e9857422884","target":{"file":"service/java/com/android/os/profiling/ProfilingService.java","function":"addTrigger"},"deprecated":false,"digest":{"length":384,"function_hash":"98600897978392964913342344976105027110"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/57d3f4da1ff871e18db8795fb2dd2e9857422884","target":{"file":"service/java/com/android/os/profiling/ProfilingService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["140980351542841865322874667206116268233","212112380952491241971394349394802320028","43038151300178774547995806109245907378","180523832217444172169222380602873127213","307927668931008622988596837867476833904","257523563587753747335333235819692878160","324845346487321138674729793356086715422","297110464572594597890543167437134563738","148800993958335204571843429349796923238","305906586449176453846815912992275736011"]},"id":"ASB-A-425360073-efd78f9a","signature_type":"Line"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-425360073.json"}}],"schema_version":"1.9.0"}