{"id":"ASB-A-447536200","details":"In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-447536200","CVE-2026-0059"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2026-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/94566a29d020042ec4b423119f4d019d958b1aaf"}],"affected":[{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-06-01"}]}],"versions":["17-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a"],"severity":"High","spl":"2026-06-01","types":["RCE"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdp_discovery.cc","function":"process_service_attr_rsp"},"deprecated":false,"digest":{"function_hash":"228124477976245695124745732923622025023","length":2673},"id":"ASB-A-447536200-05898a51","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-447536200-1cdbb47c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_is_base_uuid"},"deprecated":false,"digest":{"function_hash":"333724087067145912869271161799429386418","length":185}},{"id":"ASB-A-447536200-20649856","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_clear_all_ccbs_for_cid"},"deprecated":false,"digest":{"function_hash":"81482547451265556306424903678459766129","length":341}},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"function":"sdpu_build_attrib_seq","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"function_hash":"65679401819610885128879197593996558186","length":682},"id":"ASB-A-447536200-2468246e","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":521,"function_hash":"150730886917213782520724660801541534010"},"id":"ASB-A-447536200-3298115a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"function":"sdpu_get_attrib_seq_len","file":"system/stack/sdp/sdp_utils.cc"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_process_pend_ccb_same_cid"},"deprecated":false,"digest":{"function_hash":"1006278776863331260199144266564773463","length":429},"id":"ASB-A-447536200-3a246f1b","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"function":"sdpu_process_pend_ccb_new_cid","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"function_hash":"78343784564162593110955058439191107236","length":740},"id":"ASB-A-447536200-4002adf9"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdp_discovery.cc","function":"sdp_snd_service_search_req"},"deprecated":false,"digest":{"function_hash":"319676069720130263146922114782178272468","length":1496},"id":"ASB-A-447536200-47d64fbf"},{"deprecated":false,"digest":{"function_hash":"279338205253987393261141600593878522533","length":465},"id":"ASB-A-447536200-517de2f7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"function":"sdpu_get_active_ccb_cid","file":"system/stack/sdp/sdp_utils.cc"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"function":"process_service_search_attr_rsp","file":"system/stack/sdp/sdp_discovery.cc"},"deprecated":false,"digest":{"length":3642,"function_hash":"200039696306405254345323423075009536239"},"id":"ASB-A-447536200-57755f41"},{"id":"ASB-A-447536200-6dbd3e08","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"line_hashes":["326370735855782173290088333519199024501","23775190123876185367952224390436993630","214008033334314886152430659070161006070","19158865299871508974583687411596965783","108404385497647739189959524256453112757","304463337081961149951185785977887023747","90154277084635067974258224429291730575","274969701243507201424821078372926604986","278365189175265788358718205491501046780","231084207802152130568933406874529808348","221859579320574027536831881722138168489","144313513534590638134725235298719246491","32543603161677176855104810085841475209","26754928882030398912622750934244099367","157294517388950836013497118318277650405","48185019849494187661612053535622932786","167521774277652692342849343101078533110","276756990864081341744246601161355618197","74273699812742365430141261706142631460","34647836671808944544916338826853468026","334324837258436036672063254752341890796","46307960329306334866436444378705138076","179749108502613592247648680954611298347","236251186616068309474544052909372766471","119246952202329294236808126097919144893","139224628970119815935533933945979508547","91013505136131953619925512187470977113","49883370931429588927880830416878931236","70877147429192502848043836931041021146","306998342490107075672154028662122706074","252601170005359041027288205100501752322","67078385489255641139962012911637787104","52529972395341481296516571846908603738","154229003422302414995266222010052262995","306269228552719857307932085848829441729","185185180429629931402327951989947970450","304360568698892400282016347847436309157","112132681103412679542392778145806142316","168361769482275271245464666724613642538","212811995986721383140016008002199073860","309311720268083120908592299428973346565","316560629611697645921225785457231240235","233257058859039914057226832547395699501","12599416583967498031884446909047241290","21756245403317452600140451063624359492","32288059406285717573537828019028935314","311448689938422014763309863834569663926","193930503312197903953190909580389544862","306269228552719857307932085848829441729","185185180429629931402327951989947970450","99199587304693493220773868781022884981","12064174143542204562024668115732699549","313187825757134591379171286585886808814","327215228318906691143183335563639566379","79272656834164451933794474062533160745","178544324326528763576308132597231427274","256935188940384320821465600702650672030","326631676306538573570444043739411462570","137425355368622959117415691134457687761","264189053794117285838469680204300536083","154577415408098892618715483155904229563","102816232909661194573612923711765279610","217559866803613539181936902618958470861","201231236171259407064836701161991166312","108631665475905534738327248248822642075","51445223963378330972303350929557905991","199453958352446924736154211746824617573","82968710789178680278744926141136139424","108712289331515478568327924746544825520","89376339245645909852432352248151532356","169672469906830227547459443234812288195","197657977485633135660875508687874485253","187450595241006105693429992055939501030","259763838707751556659522844238805527769","225298182088182573997019063648279313760","141751588404925206638793119708321271300","16354430546490706990457278431273215788","38433798499403747781527309899318996623","178895073226500160457343647740838484659","90349375008200988480856512099154006686","194646932120628440495656481768784140803","246326683515591731197641092874218477180","155872781830939399377585313960684436835","312480222250217645006778648212679949130","314543507040991882890378359474810089450","235948113649741128556398669173371333425","164483634386077128027241956451505197708","183189645098710955767238707651902810425","50478338057853078796698474751733576499"],"threshold":0.9}},{"target":{"function":"sdpu_find_ccb_by_cid","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"function_hash":"80754606558893926492832094027308066581","length":336},"id":"ASB-A-447536200-706f9020","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_dump_all_ccb"},"deprecated":false,"digest":{"length":324,"function_hash":"214643982189623892415196064866639173907"},"id":"ASB-A-447536200-75c38d74","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":420,"function_hash":"80933393125222945169276068956322292293"},"id":"ASB-A-447536200-96dad96a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_clear_pend_ccb"}},{"id":"ASB-A-447536200-cc255ba8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_find_ccb_by_db"},"deprecated":false,"digest":{"length":300,"function_hash":"111669523368200778989000892464108701398"}},{"digest":{"function_hash":"54787946774131276834997011142070032338","length":322},"id":"ASB-A-447536200-e20e0857","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_allocate_ccb"},"deprecated":false},{"id":"ASB-A-447536200-ef1f0a28","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdpint.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["171078056534141121881746231170084347661","170947527587775249395543101524768367324","258573597564683953108495265542610645476","328736490807440130119498483174093372464"]}},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a","target":{"file":"system/stack/sdp/sdp_discovery.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["245274500916817765685026299223726931501","261107640071343295284311259762648782367","280871192533331872490680348279995469507","159758736012175431084880502847943668461","312665254395866983748225937565226607594","155553672837112500187961424711653847152","183658112776456884982317791669428260512","245274500916817765685026299223726931501","239216014942955512543650145673427277677","37095494119066417819874032828651970831","193361253108039010474392589263493625407","131547622748974736285629891326986368741","143033073766739784571993086891917467312","284770161684915356956004941730926158323","305616741311290478236511749051214208940","76985485075227398684660142720497034879","65954147434926373067775428596254591438","51778380885260079002472106207060386654","298845928710937452972966093599563997059","287725367748858497641260553031501012666","276576309933893761289846244921743107883","152922577545610054467656687284007472864","304295685645017222468866694584391935067","32260036647202101542321266565207101459","195062101594314683239219202772270039101","280650560292466829771637302790996489161","291243410863650913579494073112024021213","305616741311290478236511749051214208940","76985485075227398684660142720497034879","65954147434926373067775428596254591438","60835984753162607771912530381849305263","202071630383348982842554994678484635834"]},"id":"ASB-A-447536200-fca56305","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-447536200.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-06-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2026-06-01","types":["RCE"],"vanir_signatures":[{"target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_clear_pend_ccb"},"deprecated":false,"digest":{"length":372,"function_hash":"316212770131371436286519623397336237357"},"id":"ASB-A-447536200-2e699930","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535"},{"target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_process_pend_ccb_new_cid"},"deprecated":false,"digest":{"length":625,"function_hash":"265068443550774229780860342413028575553"},"id":"ASB-A-447536200-3b23362a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535","target":{"file":"system/stack/sdp/sdp_discovery.cc"},"deprecated":false,"digest":{"line_hashes":["183658112776456884982317791669428260512","245274500916817765685026299223726931501","261107640071343295284311259762648782367","107432523268821900211035860330276751102","159758736012175431084880502847943668461","312665254395866983748225937565226607594","183658112776456884982317791669428260512","245274500916817765685026299223726931501","239216014942955512543650145673427277677","171190651436066523382397299537867725127","193361253108039010474392589263493625407","44259014220124156151158169539784005727","83615662073872901412605072790669479592","332603156978438045215459941919583329411","390938992300505522195875478186405772","209092327733482572776398202651444387212","1007792411899903657847015103372108454","215784879440283593456859045336608473736","265917009288791384330916886080142152618","287725367748858497641260553031501012666","276576309933893761289846244921743107883","152922577545610054467656687284007472864","304295685645017222468866694584391935067","32260036647202101542321266565207101459","195062101594314683239219202772270039101","140943815529429886940162158830286155510","332603156978438045215459941919583329411","390938992300505522195875478186405772","209092327733482572776398202651444387212","240050482495480845480262458032094524268","68314242089519690823758425391443762558","314957757806087263563056318967461454051"],"threshold":0.9},"id":"ASB-A-447536200-580234d4"},{"digest":{"line_hashes":["245975806998326282897736415136276715524","227635983820497233123737089326974992700","333298292523052068529268180816754694612","136551380523486633017351997876088482372"],"threshold":0.9},"id":"ASB-A-447536200-5bfebd1a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535","target":{"file":"system/stack/sdp/sdpint.h"},"deprecated":false},{"deprecated":false,"digest":{"length":185,"function_hash":"208546097822161473594154319925646749696"},"id":"ASB-A-447536200-7a305ba3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535","target":{"function":"sdpu_is_base_uuid","file":"system/stack/sdp/sdp_utils.cc"}},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535","target":{"file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["326370735855782173290088333519199024501","168484737811878346476233804207844102802","209855550805138250423092381834766273225","270635274930716844049003356273687678094","35436834977655841040790079453909089138","220760902501378382155048574824173680689","115514079460509737281765431370265493595","264567184784687710178383146007433450256","187612247867437204207291813035662472450","244534874859023549461483857930705054685","236860252472128135954545952216777379271","314347501146288078239009769938107745555","335635115093336676414886775784852034944","305409964575734714147609171868653136022","216753756236515197432872685449490267809","72923339473680657477029268661882284535","12388186395672872938962820315297379170","294325273084886363883312843215450402740","27877949440982926145266306272050375863","306236976359628743469644493118247518520","114552253490572829054692528441112407866","324150545003371972269092317629291655842","82940527776583746352715246972010390065","188939913193119186317185389500148929266","299980396087160819537571327673927603649","248540149873802503755277051623794251175","199807422108682321122217058621257728022","11625168764582711805871222798910270171","230224199089253317929709415374938866428","311804297712642271149551374327002463786","136322865108038674428021675166742603321","217004413781050003220444925721375424194","99907716076257563476849358806210622176","157066826348609771402794977173593848574","162937564018798944678715653955007552850","328947380536869477407505614412193768967","215089919965880416929432952714073707934","245720050566093072363892831534780966362","136322865108038674428021675166742603321","243025138387903154865409534615720559931","193515975318773987868370188795133729651","129606122677402709963051695211538735221","230224199089253317929709415374938866428","311804297712642271149551374327002463786","136322865108038674428021675166742603321","178471867417679587374181406900292538190","78240578126920771397608582533241210579","10021676309050580608348405789842091724","97340881592337826414141165792030715775","316541200221134718438491709068700218407","152820968930503425259694623337199103001","6183317276182603485105702155572644745","47583654619010511337980586558146490640","67028234233707455533253824454951475441","287659366736639719616329542557909764796","75227255106732586204217689819467596758","68708104641908612620073674231858830650","121739399516288288285404311758313045303","176667335615767700481509840876035817237","139384029423412105122811606899191639880","295976341110895970466300820547144591938","187450595241006105693429992055939501030","259763838707751556659522844238805527769","225298182088182573997019063648279313760","141751588404925206638793119708321271300","16354430546490706990457278431273215788","117367199946443104980179049542708737775","103430217550062819751943427571824005012","113306698009149581613564880102064838492","172711697904102539492773343677023438809","290609846976860001417399293487738666528","179477199284833202379375428347980354786","312480222250217645006778648212679949130","314543507040991882890378359474810089450","235948113649741128556398669173371333425","164483634386077128027241956451505197708","183189645098710955767238707651902810425","50478338057853078796698474751733576499"]},"id":"ASB-A-447536200-7b2d3900","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_find_ccb_by_cid"},"deprecated":false,"digest":{"function_hash":"161396794554933336749352277169402152545","length":318},"id":"ASB-A-447536200-7c073fbf","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-447536200-85628514","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535","target":{"file":"system/stack/sdp/sdp_discovery.cc","function":"process_service_search_attr_rsp"},"deprecated":false,"digest":{"function_hash":"135891749664453553410849230616205028341","length":3528}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535","target":{"function":"sdpu_find_ccb_by_db","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"length":284,"function_hash":"321253627777962018752892434377834609709"},"id":"ASB-A-447536200-8cb6f0f3","signature_type":"Function"},{"id":"ASB-A-447536200-a425e0c2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_build_attrib_seq"},"deprecated":false,"digest":{"length":678,"function_hash":"294350224971533841332535454650550480264"}},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_process_pend_ccb_same_cid"},"deprecated":false,"digest":{"function_hash":"51906606051393105916285679985183477357","length":392},"id":"ASB-A-447536200-b84a7481","signature_type":"Function","signature_version":"v1"},{"target":{"file":"system/stack/sdp/sdp_discovery.cc","function":"process_service_attr_rsp"},"deprecated":false,"digest":{"function_hash":"147894309073835760763737170124141275467","length":2543},"id":"ASB-A-447536200-b9e2fd9f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535"},{"id":"ASB-A-447536200-bcac08a1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535","target":{"file":"system/stack/sdp/sdp_discovery.cc","function":"sdp_snd_service_search_req"},"deprecated":false,"digest":{"length":1357,"function_hash":"73857224782077910049613307889255999820"}},{"target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_allocate_ccb"},"deprecated":false,"digest":{"function_hash":"185248776116333911992658732841792976773","length":306},"id":"ASB-A-447536200-cefd9b54","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535"},{"target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_get_attrib_seq_len"},"deprecated":false,"digest":{"function_hash":"16144016054025343443327941460178366551","length":513},"id":"ASB-A-447536200-de711d85","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535"},{"deprecated":false,"digest":{"length":428,"function_hash":"268203369504127249340521470771014775229"},"id":"ASB-A-447536200-f6c451b2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_get_active_ccb_cid"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-447536200.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-06-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765"],"severity":"High","spl":"2026-06-01","types":["RCE"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"function":"sdpu_allocate_ccb","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"length":322,"function_hash":"54787946774131276834997011142070032338"},"id":"ASB-A-447536200-01221c2b"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"file":"system/stack/sdp/sdpint.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["171078056534141121881746231170084347661","170947527587775249395543101524768367324","258573597564683953108495265542610645476","328736490807440130119498483174093372464"]},"id":"ASB-A-447536200-02a2e14b","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_clear_pend_ccb"},"deprecated":false,"digest":{"length":420,"function_hash":"80933393125222945169276068956322292293"},"id":"ASB-A-447536200-1f232d1b"},{"target":{"file":"system/stack/sdp/sdp_discovery.cc"},"deprecated":false,"digest":{"line_hashes":["245274500916817765685026299223726931501","261107640071343295284311259762648782367","280871192533331872490680348279995469507","159758736012175431084880502847943668461","312665254395866983748225937565226607594","155553672837112500187961424711653847152","183658112776456884982317791669428260512","245274500916817765685026299223726931501","239216014942955512543650145673427277677","37095494119066417819874032828651970831","193361253108039010474392589263493625407","131547622748974736285629891326986368741","278236368816588612270418516681587099013","284770161684915356956004941730926158323","305616741311290478236511749051214208940","76985485075227398684660142720497034879","65954147434926373067775428596254591438","51778380885260079002472106207060386654","298845928710937452972966093599563997059","287725367748858497641260553031501012666","276576309933893761289846244921743107883","152922577545610054467656687284007472864","304295685645017222468866694584391935067","32260036647202101542321266565207101459","195062101594314683239219202772270039101","280650560292466829771637302790996489161","291243410863650913579494073112024021213","305616741311290478236511749051214208940","76985485075227398684660142720497034879","65954147434926373067775428596254591438","60835984753162607771912530381849305263","202071630383348982842554994678484635834"],"threshold":0.9},"id":"ASB-A-447536200-2722c5b0","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"file":"system/stack/sdp/sdp_discovery.cc","function":"process_service_search_attr_rsp"},"deprecated":false,"digest":{"function_hash":"241885653638003086859494901313903625041","length":3604},"id":"ASB-A-447536200-3deb900a","signature_type":"Function"},{"id":"ASB-A-447536200-426e7843","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_process_pend_ccb_new_cid"},"deprecated":false,"digest":{"length":740,"function_hash":"78343784564162593110955058439191107236"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"function":"sdpu_is_base_uuid","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"function_hash":"333724087067145912869271161799429386418","length":185},"id":"ASB-A-447536200-43acb9de","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"65679401819610885128879197593996558186","length":682},"id":"ASB-A-447536200-5b53f231","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_build_attrib_seq"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["326370735855782173290088333519199024501","23775190123876185367952224390436993630","214008033334314886152430659070161006070","19158865299871508974583687411596965783","108404385497647739189959524256453112757","304463337081961149951185785977887023747","90154277084635067974258224429291730575","274969701243507201424821078372926604986","278365189175265788358718205491501046780","231084207802152130568933406874529808348","221859579320574027536831881722138168489","144313513534590638134725235298719246491","32543603161677176855104810085841475209","26754928882030398912622750934244099367","157294517388950836013497118318277650405","48185019849494187661612053535622932786","167521774277652692342849343101078533110","276756990864081341744246601161355618197","74273699812742365430141261706142631460","34647836671808944544916338826853468026","334324837258436036672063254752341890796","46307960329306334866436444378705138076","179749108502613592247648680954611298347","236251186616068309474544052909372766471","119246952202329294236808126097919144893","139224628970119815935533933945979508547","91013505136131953619925512187470977113","49883370931429588927880830416878931236","70877147429192502848043836931041021146","306998342490107075672154028662122706074","252601170005359041027288205100501752322","67078385489255641139962012911637787104","52529972395341481296516571846908603738","154229003422302414995266222010052262995","306269228552719857307932085848829441729","185185180429629931402327951989947970450","304360568698892400282016347847436309157","112132681103412679542392778145806142316","168361769482275271245464666724613642538","212811995986721383140016008002199073860","309311720268083120908592299428973346565","316560629611697645921225785457231240235","233257058859039914057226832547395699501","12599416583967498031884446909047241290","21756245403317452600140451063624359492","32288059406285717573537828019028935314","311448689938422014763309863834569663926","193930503312197903953190909580389544862","306269228552719857307932085848829441729","185185180429629931402327951989947970450","99199587304693493220773868781022884981","326631676306538573570444043739411462570","137425355368622959117415691134457687761","264189053794117285838469680204300536083","154577415408098892618715483155904229563","102816232909661194573612923711765279610","217559866803613539181936902618958470861","201231236171259407064836701161991166312","108631665475905534738327248248822642075","51445223963378330972303350929557905991","199453958352446924736154211746824617573","82968710789178680278744926141136139424","108712289331515478568327924746544825520","89376339245645909852432352248151532356","169672469906830227547459443234812288195","197657977485633135660875508687874485253","187450595241006105693429992055939501030","259763838707751556659522844238805527769","225298182088182573997019063648279313760","141751588404925206638793119708321271300","16354430546490706990457278431273215788","38433798499403747781527309899318996623","178895073226500160457343647740838484659","90349375008200988480856512099154006686","194646932120628440495656481768784140803","246326683515591731197641092874218477180","155872781830939399377585313960684436835","312480222250217645006778648212679949130","314543507040991882890378359474810089450","235948113649741128556398669173371333425","164483634386077128027241956451505197708","183189645098710955767238707651902810425","50478338057853078796698474751733576499"]},"id":"ASB-A-447536200-5f607313"},{"id":"ASB-A-447536200-5f90a9ce","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_process_pend_ccb_same_cid"},"deprecated":false,"digest":{"length":429,"function_hash":"1006278776863331260199144266564773463"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"function":"sdpu_find_ccb_by_db","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"function_hash":"111669523368200778989000892464108701398","length":300},"id":"ASB-A-447536200-88cbf484","signature_type":"Function"},{"id":"ASB-A-447536200-903d3874","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"file":"system/stack/sdp/sdp_discovery.cc","function":"sdp_snd_service_search_req"},"deprecated":false,"digest":{"function_hash":"319676069720130263146922114782178272468","length":1496}},{"id":"ASB-A-447536200-9ab24f34","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_find_ccb_by_cid"},"deprecated":false,"digest":{"length":336,"function_hash":"80754606558893926492832094027308066581"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"file":"system/stack/sdp/sdp_discovery.cc","function":"process_service_attr_rsp"},"deprecated":false,"digest":{"function_hash":"228124477976245695124745732923622025023","length":2673},"id":"ASB-A-447536200-aa6bd2bd","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"function":"sdpu_dump_all_ccb","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"function_hash":"214643982189623892415196064866639173907","length":324},"id":"ASB-A-447536200-be6b64c9","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"279338205253987393261141600593878522533","length":465},"id":"ASB-A-447536200-cb0c373a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"function":"sdpu_get_active_ccb_cid","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false},{"digest":{"function_hash":"150730886917213782520724660801541534010","length":521},"id":"ASB-A-447536200-d703522e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_get_attrib_seq_len"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-447536200.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-06-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"types":["RCE"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_clear_pend_ccb"},"deprecated":false,"digest":{"length":420,"function_hash":"80933393125222945169276068956322292293"},"id":"ASB-A-447536200-07602cff"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"function":"sdpu_allocate_ccb","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"function_hash":"54787946774131276834997011142070032338","length":322},"id":"ASB-A-447536200-2414d0ac"},{"deprecated":false,"digest":{"length":336,"function_hash":"80754606558893926492832094027308066581"},"id":"ASB-A-447536200-256a91c7","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_find_ccb_by_cid"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"file":"system/stack/sdp/sdp_discovery.cc","function":"sdp_snd_service_search_req"},"deprecated":false,"digest":{"length":1496,"function_hash":"319676069720130263146922114782178272468"},"id":"ASB-A-447536200-2abb71bf"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_process_pend_ccb_new_cid"},"deprecated":false,"digest":{"function_hash":"78343784564162593110955058439191107236","length":740},"id":"ASB-A-447536200-2d491f1e","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"function":"sdpu_process_pend_ccb_same_cid","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"function_hash":"1006278776863331260199144266564773463","length":429},"id":"ASB-A-447536200-4d16753d","signature_type":"Function"},{"target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_clear_all_ccbs_for_cid"},"deprecated":false,"digest":{"length":341,"function_hash":"81482547451265556306424903678459766129"},"id":"ASB-A-447536200-5ef28fbc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0"},{"deprecated":false,"digest":{"function_hash":"279338205253987393261141600593878522533","length":465},"id":"ASB-A-447536200-67b44505","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"function":"sdpu_get_active_ccb_cid","file":"system/stack/sdp/sdp_utils.cc"}},{"deprecated":false,"digest":{"line_hashes":["245274500916817765685026299223726931501","261107640071343295284311259762648782367","280871192533331872490680348279995469507","159758736012175431084880502847943668461","312665254395866983748225937565226607594","155553672837112500187961424711653847152","183658112776456884982317791669428260512","245274500916817765685026299223726931501","239216014942955512543650145673427277677","37095494119066417819874032828651970831","193361253108039010474392589263493625407","131547622748974736285629891326986368741","143033073766739784571993086891917467312","284770161684915356956004941730926158323","305616741311290478236511749051214208940","76985485075227398684660142720497034879","65954147434926373067775428596254591438","51778380885260079002472106207060386654","298845928710937452972966093599563997059","287725367748858497641260553031501012666","276576309933893761289846244921743107883","152922577545610054467656687284007472864","304295685645017222468866694584391935067","32260036647202101542321266565207101459","195062101594314683239219202772270039101","280650560292466829771637302790996489161","291243410863650913579494073112024021213","305616741311290478236511749051214208940","76985485075227398684660142720497034879","65954147434926373067775428596254591438","60835984753162607771912530381849305263","202071630383348982842554994678484635834"],"threshold":0.9},"id":"ASB-A-447536200-6c7bfe88","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"file":"system/stack/sdp/sdp_discovery.cc"}},{"target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_build_attrib_seq"},"deprecated":false,"digest":{"function_hash":"65679401819610885128879197593996558186","length":682},"id":"ASB-A-447536200-80d7c93a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0"},{"deprecated":false,"digest":{"line_hashes":["171078056534141121881746231170084347661","170947527587775249395543101524768367324","258573597564683953108495265542610645476","328736490807440130119498483174093372464"],"threshold":0.9},"id":"ASB-A-447536200-8b309539","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"file":"system/stack/sdp/sdpint.h"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"function":"sdpu_is_base_uuid","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"length":185,"function_hash":"333724087067145912869271161799429386418"},"id":"ASB-A-447536200-9f6c7dfe","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_dump_all_ccb"},"deprecated":false,"digest":{"function_hash":"214643982189623892415196064866639173907","length":324},"id":"ASB-A-447536200-ae55985d"},{"target":{"file":"system/stack/sdp/sdp_discovery.cc","function":"process_service_search_attr_rsp"},"deprecated":false,"digest":{"function_hash":"200039696306405254345323423075009536239","length":3642},"id":"ASB-A-447536200-b574b561","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["326370735855782173290088333519199024501","23775190123876185367952224390436993630","214008033334314886152430659070161006070","19158865299871508974583687411596965783","108404385497647739189959524256453112757","304463337081961149951185785977887023747","90154277084635067974258224429291730575","274969701243507201424821078372926604986","278365189175265788358718205491501046780","231084207802152130568933406874529808348","221859579320574027536831881722138168489","144313513534590638134725235298719246491","32543603161677176855104810085841475209","26754928882030398912622750934244099367","157294517388950836013497118318277650405","48185019849494187661612053535622932786","167521774277652692342849343101078533110","276756990864081341744246601161355618197","74273699812742365430141261706142631460","34647836671808944544916338826853468026","334324837258436036672063254752341890796","46307960329306334866436444378705138076","179749108502613592247648680954611298347","236251186616068309474544052909372766471","119246952202329294236808126097919144893","139224628970119815935533933945979508547","91013505136131953619925512187470977113","49883370931429588927880830416878931236","70877147429192502848043836931041021146","306998342490107075672154028662122706074","252601170005359041027288205100501752322","67078385489255641139962012911637787104","52529972395341481296516571846908603738","154229003422302414995266222010052262995","306269228552719857307932085848829441729","185185180429629931402327951989947970450","304360568698892400282016347847436309157","112132681103412679542392778145806142316","168361769482275271245464666724613642538","212811995986721383140016008002199073860","309311720268083120908592299428973346565","316560629611697645921225785457231240235","233257058859039914057226832547395699501","12599416583967498031884446909047241290","21756245403317452600140451063624359492","32288059406285717573537828019028935314","311448689938422014763309863834569663926","193930503312197903953190909580389544862","306269228552719857307932085848829441729","185185180429629931402327951989947970450","99199587304693493220773868781022884981","12064174143542204562024668115732699549","313187825757134591379171286585886808814","327215228318906691143183335563639566379","79272656834164451933794474062533160745","178544324326528763576308132597231427274","256935188940384320821465600702650672030","326631676306538573570444043739411462570","137425355368622959117415691134457687761","264189053794117285838469680204300536083","154577415408098892618715483155904229563","102816232909661194573612923711765279610","217559866803613539181936902618958470861","201231236171259407064836701161991166312","108631665475905534738327248248822642075","51445223963378330972303350929557905991","199453958352446924736154211746824617573","82968710789178680278744926141136139424","108712289331515478568327924746544825520","89376339245645909852432352248151532356","169672469906830227547459443234812288195","197657977485633135660875508687874485253","187450595241006105693429992055939501030","259763838707751556659522844238805527769","225298182088182573997019063648279313760","141751588404925206638793119708321271300","16354430546490706990457278431273215788","38433798499403747781527309899318996623","178895073226500160457343647740838484659","90349375008200988480856512099154006686","194646932120628440495656481768784140803","246326683515591731197641092874218477180","155872781830939399377585313960684436835","312480222250217645006778648212679949130","314543507040991882890378359474810089450","235948113649741128556398669173371333425","164483634386077128027241956451505197708","183189645098710955767238707651902810425","50478338057853078796698474751733576499"]},"id":"ASB-A-447536200-b9d6cb6a","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"228124477976245695124745732923622025023","length":2673},"id":"ASB-A-447536200-c542ffa3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"function":"process_service_attr_rsp","file":"system/stack/sdp/sdp_discovery.cc"},"deprecated":false},{"target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_get_attrib_seq_len"},"deprecated":false,"digest":{"length":521,"function_hash":"150730886917213782520724660801541534010"},"id":"ASB-A-447536200-d904fee8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_find_ccb_by_db"},"deprecated":false,"digest":{"length":300,"function_hash":"111669523368200778989000892464108701398"},"id":"ASB-A-447536200-e51206e3","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0"],"severity":"High","spl":"2026-06-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-447536200.json"}},{"package":{"name":"platform/packages/modules/Bluetooth","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-06-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2026-06-01","types":["RCE"],"vanir_signatures":[{"digest":{"length":428,"function_hash":"268203369504127249340521470771014775229"},"id":"ASB-A-447536200-0f2000f3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"function":"sdpu_get_active_ccb_cid","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"51906606051393105916285679985183477357","length":392},"id":"ASB-A-447536200-33aef207","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_process_pend_ccb_same_cid"}},{"deprecated":false,"digest":{"length":284,"function_hash":"321253627777962018752892434377834609709"},"id":"ASB-A-447536200-3a506856","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_find_ccb_by_db"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"function":"sdpu_build_attrib_seq","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"length":678,"function_hash":"294350224971533841332535454650550480264"},"id":"ASB-A-447536200-40db2f60","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"function":"sdpu_is_base_uuid","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"length":185,"function_hash":"208546097822161473594154319925646749696"},"id":"ASB-A-447536200-5229901c","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"316212770131371436286519623397336237357","length":372},"id":"ASB-A-447536200-6e9efd5b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_clear_pend_ccb"},"deprecated":false},{"target":{"function":"sdp_snd_service_search_req","file":"system/stack/sdp/sdp_discovery.cc"},"deprecated":false,"digest":{"length":1196,"function_hash":"185511266961220871417896236587016407159"},"id":"ASB-A-447536200-7d467f85","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5"},{"digest":{"length":625,"function_hash":"265068443550774229780860342413028575553"},"id":"ASB-A-447536200-95595d1b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_process_pend_ccb_new_cid"},"deprecated":false},{"id":"ASB-A-447536200-a8f92035","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"function":"process_service_search_attr_rsp","file":"system/stack/sdp/sdp_discovery.cc"},"deprecated":false,"digest":{"function_hash":"137824660385644395807534434788393530333","length":3352}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"function":"process_service_attr_rsp","file":"system/stack/sdp/sdp_discovery.cc"},"deprecated":false,"digest":{"length":2375,"function_hash":"283483212780402653971868260915573482889"},"id":"ASB-A-447536200-b170d237","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"line_hashes":["326370735855782173290088333519199024501","168484737811878346476233804207844102802","209855550805138250423092381834766273225","270635274930716844049003356273687678094","35436834977655841040790079453909089138","220760902501378382155048574824173680689","115514079460509737281765431370265493595","264567184784687710178383146007433450256","187612247867437204207291813035662472450","244534874859023549461483857930705054685","236860252472128135954545952216777379271","314347501146288078239009769938107745555","335635115093336676414886775784852034944","305409964575734714147609171868653136022","216753756236515197432872685449490267809","72923339473680657477029268661882284535","12388186395672872938962820315297379170","294325273084886363883312843215450402740","288009977742297230995318154240597858412","318916258940453183509867537111764787343","334578430779693349322848087524705004496","253810660964793155643776332215935440335","82940527776583746352715246972010390065","188939913193119186317185389500148929266","299980396087160819537571327673927603649","248540149873802503755277051623794251175","199807422108682321122217058621257728022","11625168764582711805871222798910270171","230224199089253317929709415374938866428","311804297712642271149551374327002463786","136322865108038674428021675166742603321","217004413781050003220444925721375424194","99907716076257563476849358806210622176","157066826348609771402794977173593848574","162937564018798944678715653955007552850","328947380536869477407505614412193768967","215089919965880416929432952714073707934","245720050566093072363892831534780966362","136322865108038674428021675166742603321","243025138387903154865409534615720559931","193515975318773987868370188795133729651","129606122677402709963051695211538735221","230224199089253317929709415374938866428","311804297712642271149551374327002463786","136322865108038674428021675166742603321","178471867417679587374181406900292538190","78240578126920771397608582533241210579","10021676309050580608348405789842091724","97340881592337826414141165792030715775","316541200221134718438491709068700218407","152820968930503425259694623337199103001","6183317276182603485105702155572644745","47583654619010511337980586558146490640","67028234233707455533253824454951475441","287659366736639719616329542557909764796","75227255106732586204217689819467596758","68708104641908612620073674231858830650","121739399516288288285404311758313045303","176667335615767700481509840876035817237","139384029423412105122811606899191639880","295976341110895970466300820547144591938","187450595241006105693429992055939501030","259763838707751556659522844238805527769","225298182088182573997019063648279313760","141751588404925206638793119708321271300","16354430546490706990457278431273215788","117367199946443104980179049542708737775","103430217550062819751943427571824005012","113306698009149581613564880102064838492","172711697904102539492773343677023438809","290609846976860001417399293487738666528","179477199284833202379375428347980354786","312480222250217645006778648212679949130","314543507040991882890378359474810089450","235948113649741128556398669173371333425","164483634386077128027241956451505197708","183189645098710955767238707651902810425","50478338057853078796698474751733576499"],"threshold":0.9},"id":"ASB-A-447536200-b2498fdf","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"file":"system/stack/sdp/sdpint.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["245975806998326282897736415136276715524","227635983820497233123737089326974992700","333298292523052068529268180816754694612","136551380523486633017351997876088482372"]},"id":"ASB-A-447536200-c9e43520","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"function":"sdpu_allocate_ccb","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"function_hash":"163357353377803991905001215573021738773","length":334},"id":"ASB-A-447536200-ddbc3104"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"function":"sdpu_find_ccb_by_cid","file":"system/stack/sdp/sdp_utils.cc"},"deprecated":false,"digest":{"function_hash":"161396794554933336749352277169402152545","length":318},"id":"ASB-A-447536200-e88cbdbd","signature_type":"Function"},{"id":"ASB-A-447536200-ebcd4771","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"file":"system/stack/sdp/sdp_discovery.cc"},"deprecated":false,"digest":{"line_hashes":["183658112776456884982317791669428260512","245274500916817765685026299223726931501","261107640071343295284311259762648782367","107432523268821900211035860330276751102","159758736012175431084880502847943668461","312665254395866983748225937565226607594","287725367748858497641260553031501012666","276576309933893761289846244921743107883","152922577545610054467656687284007472864","304295685645017222468866694584391935067","32260036647202101542321266565207101459","195062101594314683239219202772270039101","140943815529429886940162158830286155510","332603156978438045215459941919583329411","390938992300505522195875478186405772","209092327733482572776398202651444387212","240050482495480845480262458032094524268","68314242089519690823758425391443762558","314957757806087263563056318967461454051","286660203041770791370329292598644301060","183658112776456884982317791669428260512","245274500916817765685026299223726931501","239216014942955512543650145673427277677","171190651436066523382397299537867725127","193361253108039010474392589263493625407","44259014220124156151158169539784005727","83615662073872901412605072790669479592","332603156978438045215459941919583329411","390938992300505522195875478186405772","209092327733482572776398202651444387212","1007792411899903657847015103372108454","215784879440283593456859045336608473736","265917009288791384330916886080142152618"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"16144016054025343443327941460178366551","length":513},"id":"ASB-A-447536200-f6b407f1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5","target":{"file":"system/stack/sdp/sdp_utils.cc","function":"sdpu_get_attrib_seq_len"}}],"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-447536200.json"}}],"schema_version":"1.9.0"}