{"id":"ASB-A-430284594","details":"In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-430284594","CVE-2026-28633"],"modified":"2026-09-09T15:15:54.249544283Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a81b51b6a6e0b7fd6a417926b6abd8a162110060"],"severity":"High","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"digest":{"function_hash":"22097796767049131397995986305883779634","length":1166},"id":"ASB-A-430284594-2dcb7a63","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a81b51b6a6e0b7fd6a417926b6abd8a162110060","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java","function":"findAvailRecognizer"},"deprecated":false},{"target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java","function":"getAvailableServices"},"deprecated":false,"digest":{"function_hash":"200849989619387391228890798481759797004","length":601},"id":"ASB-A-430284594-5265f70c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a81b51b6a6e0b7fd6a417926b6abd8a162110060"},{"target":{"function":"initForUserNoTracing","file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java"},"deprecated":false,"digest":{"function_hash":"51252493228547609178813893766945604912","length":2587},"id":"ASB-A-430284594-815ab301","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a81b51b6a6e0b7fd6a417926b6abd8a162110060"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a81b51b6a6e0b7fd6a417926b6abd8a162110060","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java"},"deprecated":false,"digest":{"line_hashes":["308683221521529218773971589154402256318","216784990782363885268297424476872375701","68905898478925979546211270924781482336","245915063453983395789207336937028552524","19141318572984852025291572446994129758","270112884479483211486769637116666247164","109106334760514109109459346208253134120","217120845456963487098236042108437543413","5597687504906655862023741681395728747","120533222941587404210251419721398228476","71092669285325679288807851935696652059","165894829552502155134346464080520922309"],"threshold":0.9},"id":"ASB-A-430284594-93ed1a46"},{"digest":{"threshold":0.9,"line_hashes":["292666525351229928967774877167960469865","196946437649658630773127843746934214309","312122563302702039774754674684795761457","193998272160660143410886279406370351842","12237382060576030656909472573871942402","118829184796831760957180969728129216462","259512055668676702952808924985259647264","315849288911741925853117347816389862216"]},"id":"ASB-A-430284594-f5e4e6a0","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a81b51b6a6e0b7fd6a417926b6abd8a162110060","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-430284594.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-09-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"digest":{"length":1166,"function_hash":"22097796767049131397995986305883779634"},"id":"ASB-A-430284594-2eff3e3b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4e86d79f3aab4c1eb187595cf7b8d6d029b0b690","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java","function":"findAvailRecognizer"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4e86d79f3aab4c1eb187595cf7b8d6d029b0b690","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java"},"deprecated":false,"digest":{"line_hashes":["292666525351229928967774877167960469865","196946437649658630773127843746934214309","312122563302702039774754674684795761457","193998272160660143410886279406370351842","12237382060576030656909472573871942402","118829184796831760957180969728129216462","259512055668676702952808924985259647264","315849288911741925853117347816389862216"],"threshold":0.9},"id":"ASB-A-430284594-33ca12c0"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4e86d79f3aab4c1eb187595cf7b8d6d029b0b690","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java"},"deprecated":false,"digest":{"line_hashes":["308683221521529218773971589154402256318","216784990782363885268297424476872375701","68905898478925979546211270924781482336","245915063453983395789207336937028552524","19141318572984852025291572446994129758","270112884479483211486769637116666247164","109106334760514109109459346208253134120","217120845456963487098236042108437543413","5597687504906655862023741681395728747","120533222941587404210251419721398228476","71092669285325679288807851935696652059","165894829552502155134346464080520922309"],"threshold":0.9},"id":"ASB-A-430284594-768d95d6"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/4e86d79f3aab4c1eb187595cf7b8d6d029b0b690","target":{"function":"initForUserNoTracing","file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java"},"deprecated":false,"digest":{"function_hash":"51252493228547609178813893766945604912","length":2587},"id":"ASB-A-430284594-7c07c964","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"200849989619387391228890798481759797004","length":601},"id":"ASB-A-430284594-bf5239b0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4e86d79f3aab4c1eb187595cf7b8d6d029b0b690","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java","function":"getAvailableServices"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4e86d79f3aab4c1eb187595cf7b8d6d029b0b690"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-430284594.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"id":"ASB-A-430284594-1e75c225","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c3509f461486035ccb78f10e4ff07480aa2950ed","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["308683221521529218773971589154402256318","216784990782363885268297424476872375701","68905898478925979546211270924781482336","245915063453983395789207336937028552524","19141318572984852025291572446994129758","270112884479483211486769637116666247164","109106334760514109109459346208253134120","217120845456963487098236042108437543413","5597687504906655862023741681395728747","120533222941587404210251419721398228476","71092669285325679288807851935696652059","165894829552502155134346464080520922309"]}},{"digest":{"length":1166,"function_hash":"22097796767049131397995986305883779634"},"id":"ASB-A-430284594-309fa17d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c3509f461486035ccb78f10e4ff07480aa2950ed","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java","function":"findAvailRecognizer"},"deprecated":false},{"target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java","function":"initForUserNoTracing"},"deprecated":false,"digest":{"length":2587,"function_hash":"51252493228547609178813893766945604912"},"id":"ASB-A-430284594-55ab52d2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c3509f461486035ccb78f10e4ff07480aa2950ed"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c3509f461486035ccb78f10e4ff07480aa2950ed","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java"},"deprecated":false,"digest":{"line_hashes":["292666525351229928967774877167960469865","196946437649658630773127843746934214309","312122563302702039774754674684795761457","193998272160660143410886279406370351842","12237382060576030656909472573871942402","118829184796831760957180969728129216462","259512055668676702952808924985259647264","315849288911741925853117347816389862216"],"threshold":0.9},"id":"ASB-A-430284594-98994900","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"200849989619387391228890798481759797004","length":601},"id":"ASB-A-430284594-c77aa15d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c3509f461486035ccb78f10e4ff07480aa2950ed","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java","function":"getAvailableServices"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c3509f461486035ccb78f10e4ff07480aa2950ed"],"severity":"High","spl":"2026-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-430284594.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["292666525351229928967774877167960469865","196946437649658630773127843746934214309","312122563302702039774754674684795761457","193998272160660143410886279406370351842","12237382060576030656909472573871942402","118829184796831760957180969728129216462","259512055668676702952808924985259647264","315849288911741925853117347816389862216"]},"id":"ASB-A-430284594-5feb9385","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bf10a7da750175fba5ace7436a661b9ccfce3b48","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java"}},{"target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java","function":"findAvailRecognizer"},"deprecated":false,"digest":{"function_hash":"22097796767049131397995986305883779634","length":1166},"id":"ASB-A-430284594-89ef6297","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bf10a7da750175fba5ace7436a661b9ccfce3b48"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bf10a7da750175fba5ace7436a661b9ccfce3b48","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java"},"deprecated":false,"digest":{"line_hashes":["308683221521529218773971589154402256318","216784990782363885268297424476872375701","68905898478925979546211270924781482336","245915063453983395789207336937028552524","19141318572984852025291572446994129758","270112884479483211486769637116666247164","109106334760514109109459346208253134120","217120845456963487098236042108437543413","5597687504906655862023741681395728747","120533222941587404210251419721398228476","71092669285325679288807851935696652059","165894829552502155134346464080520922309"],"threshold":0.9},"id":"ASB-A-430284594-8ccd3055"},{"digest":{"function_hash":"51252493228547609178813893766945604912","length":2587},"id":"ASB-A-430284594-e543bef3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bf10a7da750175fba5ace7436a661b9ccfce3b48","target":{"function":"initForUserNoTracing","file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/bf10a7da750175fba5ace7436a661b9ccfce3b48","target":{"function":"getAvailableServices","file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java"},"deprecated":false,"digest":{"function_hash":"200849989619387391228890798481759797004","length":601},"id":"ASB-A-430284594-f800eeae","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/bf10a7da750175fba5ace7436a661b9ccfce3b48"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-430284594.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/a7bfe4f0a7fc994a626580a502a069b2a7326c40"],"severity":"High","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"digest":{"line_hashes":["308683221521529218773971589154402256318","216784990782363885268297424476872375701","68905898478925979546211270924781482336","245915063453983395789207336937028552524","19141318572984852025291572446994129758","270112884479483211486769637116666247164","109106334760514109109459346208253134120","217120845456963487098236042108437543413","5597687504906655862023741681395728747","120533222941587404210251419721398228476","71092669285325679288807851935696652059","165894829552502155134346464080520922309"],"threshold":0.9},"id":"ASB-A-430284594-3f01c004","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a7bfe4f0a7fc994a626580a502a069b2a7326c40","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/a7bfe4f0a7fc994a626580a502a069b2a7326c40","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["292666525351229928967774877167960469865","196946437649658630773127843746934214309","312122563302702039774754674684795761457","193998272160660143410886279406370351842","12237382060576030656909472573871942402","118829184796831760957180969728129216462","259512055668676702952808924985259647264","315849288911741925853117347816389862216"]},"id":"ASB-A-430284594-3f5ad1cc","signature_type":"Line","signature_version":"v1"},{"target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java","function":"findAvailRecognizer"},"deprecated":false,"digest":{"function_hash":"22097796767049131397995986305883779634","length":1166},"id":"ASB-A-430284594-972be611","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a7bfe4f0a7fc994a626580a502a069b2a7326c40"},{"id":"ASB-A-430284594-98e7789a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a7bfe4f0a7fc994a626580a502a069b2a7326c40","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java","function":"getAvailableServices"},"deprecated":false,"digest":{"length":601,"function_hash":"200849989619387391228890798481759797004"}},{"deprecated":false,"digest":{"function_hash":"51252493228547609178813893766945604912","length":2587},"id":"ASB-A-430284594-abe016b4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/a7bfe4f0a7fc994a626580a502a069b2a7326c40","target":{"function":"initForUserNoTracing","file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-430284594.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-09-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"length":2587,"function_hash":"51252493228547609178813893766945604912"},"id":"ASB-A-430284594-06aa5163","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d33205297f0e96f914b1c1bfb0bd17b8f458705","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java","function":"initForUserNoTracing"}},{"digest":{"length":601,"function_hash":"200849989619387391228890798481759797004"},"id":"ASB-A-430284594-5502d7a6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d33205297f0e96f914b1c1bfb0bd17b8f458705","target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java","function":"getAvailableServices"},"deprecated":false},{"target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java","function":"findAvailRecognizer"},"deprecated":false,"digest":{"length":1166,"function_hash":"22097796767049131397995986305883779634"},"id":"ASB-A-430284594-5c68e2e3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d33205297f0e96f914b1c1bfb0bd17b8f458705"},{"target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/RecognitionServiceInfo.java"},"deprecated":false,"digest":{"line_hashes":["308683221521529218773971589154402256318","216784990782363885268297424476872375701","68905898478925979546211270924781482336","245915063453983395789207336937028552524","19141318572984852025291572446994129758","270112884479483211486769637116666247164","109106334760514109109459346208253134120","217120845456963487098236042108437543413","5597687504906655862023741681395728747","120533222941587404210251419721398228476","71092669285325679288807851935696652059","165894829552502155134346464080520922309"],"threshold":0.9},"id":"ASB-A-430284594-94aad1d8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d33205297f0e96f914b1c1bfb0bd17b8f458705"},{"target":{"file":"services/voiceinteraction/java/com/android/server/voiceinteraction/VoiceInteractionManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["292666525351229928967774877167960469865","196946437649658630773127843746934214309","312122563302702039774754674684795761457","193998272160660143410886279406370351842","12237382060576030656909472573871942402","118829184796831760957180969728129216462","259512055668676702952808924985259647264","315849288911741925853117347816389862216"]},"id":"ASB-A-430284594-c6626567","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d33205297f0e96f914b1c1bfb0bd17b8f458705"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5d33205297f0e96f914b1c1bfb0bd17b8f458705"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-430284594.json"}}],"schema_version":"1.9.0"}