{"id":"ASB-A-425360073","details":"In multiple functions of ProfilingService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-425360073","CVE-2025-48587"],"modified":"2026-04-17T15:55:28.020024Z","published":"2026-03-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-03-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Profiling/+/ceaaf1330d3a0697e52691d223ee700824a5b4fa"}],"affected":[{"package":{"name":"platform/packages/modules/Profiling","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2-next:0"},{"fixed":"16-qpr2-next:2026-03-01"}]}],"versions":["16-qpr2-next"],"ecosystem_specific":{"spl":"2026-03-01","vanir_signatures":[{"deprecated":false,"target":{"file":"service/java/com/android/os/profiling/ProfilingService.java","function":"loadAppTriggersFromPersistedData"},"source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/e57d3597f0eb2e0bdabbf174cf57b41caee0627a","signature_version":"v1","signature_type":"Function","id":"ASB-A-425360073-4cd9fc6d","digest":{"length":1531,"function_hash":"104628925764997369973307367249319994152"}},{"deprecated":false,"target":{"file":"service/java/com/android/os/profiling/ProfilingService.java"},"source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/e57d3597f0eb2e0bdabbf174cf57b41caee0627a","signature_version":"v1","signature_type":"Line","id":"ASB-A-425360073-6a2788a0","digest":{"threshold":0.9,"line_hashes":["140980351542841865322874667206116268233","212112380952491241971394349394802320028","43038151300178774547995806109245907378","180523832217444172169222380602873127213","307927668931008622988596837867476833904","257523563587753747335333235819692878160","324845346487321138674729793356086715422","297110464572594597890543167437134563738","148800993958335204571843429349796923238","305906586449176453846815912992275736011"]}},{"deprecated":false,"target":{"file":"service/java/com/android/os/profiling/ProfilingService.java","function":"addTrigger"},"source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/e57d3597f0eb2e0bdabbf174cf57b41caee0627a","signature_version":"v1","signature_type":"Function","id":"ASB-A-425360073-8532e694","digest":{"length":466,"function_hash":"138831073507716754240349632171874470092"}}],"types":["DoS"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Profiling/+/e57d3597f0eb2e0bdabbf174cf57b41caee0627a"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-425360073.json"}},{"package":{"name":"platform/packages/modules/Profiling","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-03-01"}]}],"versions":["16"],"ecosystem_specific":{"spl":"2026-03-01","vanir_signatures":[{"deprecated":false,"target":{"file":"service/java/com/android/os/profiling/ProfilingService.java","function":"loadAppTriggersFromPersistedData"},"source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/57d3f4da1ff871e18db8795fb2dd2e9857422884","signature_version":"v1","signature_type":"Function","id":"ASB-A-425360073-8d8c5876","digest":{"length":1531,"function_hash":"104628925764997369973307367249319994152"}},{"deprecated":false,"target":{"file":"service/java/com/android/os/profiling/ProfilingService.java","function":"addTrigger"},"source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/57d3f4da1ff871e18db8795fb2dd2e9857422884","signature_version":"v1","signature_type":"Function","id":"ASB-A-425360073-e402c69f","digest":{"length":384,"function_hash":"98600897978392964913342344976105027110"}},{"deprecated":false,"target":{"file":"service/java/com/android/os/profiling/ProfilingService.java"},"source":"https://android.googlesource.com/platform/packages/modules/Profiling/+/57d3f4da1ff871e18db8795fb2dd2e9857422884","signature_version":"v1","signature_type":"Line","id":"ASB-A-425360073-efd78f9a","digest":{"threshold":0.9,"line_hashes":["140980351542841865322874667206116268233","212112380952491241971394349394802320028","43038151300178774547995806109245907378","180523832217444172169222380602873127213","307927668931008622988596837867476833904","257523563587753747335333235819692878160","324845346487321138674729793356086715422","297110464572594597890543167437134563738","148800993958335204571843429349796923238","305906586449176453846815912992275736011"]}}],"types":["DoS"],"severity":"High","fixes":["https://android.googlesource.com/platform/packages/modules/Profiling/+/57d3f4da1ff871e18db8795fb2dd2e9857422884"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-425360073.json"}}],"schema_version":"1.7.5"}