{"id":"ASB-A-451602444","details":"In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-451602444","CVE-2026-49924"],"modified":"2026-11-02T17:11:23.831400335Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"digest":{"length":4451,"function_hash":"103018159512582308872258870356973652294"},"id":"ASB-A-451602444-0b227957","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d","target":{"function":"testShortcutInfoMissingMandatoryFields","file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"pushDynamicShortcut"},"deprecated":false,"digest":{"function_hash":"28750293430185058674802037971294379389","length":932},"id":"ASB-A-451602444-106a89bb","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d","target":{"function":"ShortcutInfo","file":"core/java/android/content/pm/ShortcutInfo.java"},"deprecated":false,"digest":{"function_hash":"114175057358879051190754868453971055375","length":1044},"id":"ASB-A-451602444-10d20deb"},{"digest":{"length":1023,"function_hash":"228953785868648991940060316848552532689"},"id":"ASB-A-451602444-10fbe25c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b","target":{"function":"addDynamicShortcuts","file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"updateShortcuts"},"deprecated":false,"digest":{"function_hash":"186036941398439304080636130797669982314","length":1722},"id":"ASB-A-451602444-111eb0f4","signature_type":"Function"},{"id":"ASB-A-451602444-1aab7b0e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d","target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"},"deprecated":false,"digest":{"line_hashes":["97091192253155090159680690690253751681","287521650325813515300594181366167863772","193132984190381195312198466348957792770","177481907760786459296346074876088483190"],"threshold":0.9}},{"id":"ASB-A-451602444-24437df1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"pushDynamicShortcut"},"deprecated":false,"digest":{"length":932,"function_hash":"28750293430185058674802037971294379389"}},{"digest":{"function_hash":"330490457430214538118530996202957464749","length":391},"id":"ASB-A-451602444-263fcf80","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"validateShortcutSize"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"line_hashes":["336916740595853484794434492210072219840","21594790408101240774495751146134241496","128284451650090394194218246261020629737","299357168606543631513449318544128626148","323361789254308862404973638443262443473","267946729309153649786716065316753413522","336421579970259556127966568279106477320","256175067828422207185479545689024785568","272775078542805382455308614733401320132","102792364210649161439142880292239661121","182876723559962202617446026477368357808","124984314299000142035825172815742487109","187686037100948270343813786846529257275","154879719381060605120578332303457577267","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","154879719381060605120578332303457577267","220009168948288049530746349607475027773","283841965564621843934980190153004253387","42878899071815562444310277103980723863","154879719381060605120578332303457577267","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","65120479012864077420843313853585103656","51946388225474194777575662700645753175","197315576188323493713262946785415900653","257327764504468156481512776832539524498"],"threshold":0.9},"id":"ASB-A-451602444-2ffbf0e6","signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-451602444-32ec80ea","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d","target":{"file":"core/java/android/content/pm/ShortcutInfo.java"},"deprecated":false,"digest":{"line_hashes":["237901262931818598654165269404324731276","188665387038877244831902310914647169529","293030020031976047340834094438576543426","174068398987877512796358893514460170855","295437594364688430501389381974127258714","155544016385942242631721087576116245716","20666050734034983287765684298196125765","37990182455935330603233466065693768892","235044486346499461438481269355907735371","45126384062079443228524172241608301811","96201268035272855790580296819035371538","327861511168087302278812803253482291792","70953044295502323201936215352972950723","144763058216460005334686430221170381371","33620401118033557648716849166454018115","121027698625792230510042634182204020286","68729634454569226571668511358280742495","260507672820537349360996701794639939462","329685979369148743237431526927675348784"],"threshold":0.9}},{"digest":{"function_hash":"339601222863008298004896354620578186100","length":1004},"id":"ASB-A-451602444-36da22de","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"addDynamicShortcuts"},"deprecated":false},{"target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"updateShortcuts"},"deprecated":false,"digest":{"length":1703,"function_hash":"71412220942630048063950836074130040710"},"id":"ASB-A-451602444-41e8c656","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d"},{"digest":{"function_hash":"227901665204587025000686993088593042017","length":260},"id":"ASB-A-451602444-5ac5a843","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"validateShortcutSizes"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"setDynamicShortcuts"},"deprecated":false,"digest":{"function_hash":"94567466273624967033616009761319529129","length":1262},"id":"ASB-A-451602444-72fbba4e","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"pushDynamicShortcut"},"deprecated":false,"digest":{"length":953,"function_hash":"270393854182748939625158789241805271849"},"id":"ASB-A-451602444-7c89d3bf"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb","target":{"function":"setDynamicShortcuts","file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"length":1262,"function_hash":"94567466273624967033616009761319529129"},"id":"ASB-A-451602444-8b89269a","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-451602444-a09a6fe9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb","target":{"function":"updateShortcuts","file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"length":1703,"function_hash":"71412220942630048063950836074130040710"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b","target":{"function":"validateShortcutSize","file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"length":143,"function_hash":"157646904884070008700377512924801074702"},"id":"ASB-A-451602444-b379b8e2","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"setDynamicShortcuts"},"deprecated":false,"digest":{"function_hash":"168938080459532994748353839331824475494","length":1281},"id":"ASB-A-451602444-cd9110b7","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"line_hashes":["100618827025222456214751250299302262147","286530393883377075119530082321081462879","133588259433069124176881219414664279811","159054121081670191455971045531408269899","285409131900921830757293120523161888598","157039079928944337592054572547956496949","22738083221792164449155068249630837209","34811939372867685117369411304260014850","323361789254308862404973638443262443473","267946729309153649786716065316753413522","336421579970259556127966568279106477320","49379818860543610095124811669222887346","286690564095318448724667662454797823606","186203593297633018793551255909599452045","10928554456528628724849569667322868797","2718798138870330089531583893679522253","21220389763846704822803287709106205400","182876723559962202617446026477368357808","124984314299000142035825172815742487109","187686037100948270343813786846529257275","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","255520439221415030304095898816845586601","220009168948288049530746349607475027773","283841965564621843934980190153004253387","42878899071815562444310277103980723863","321929901381648741112357344339524583280","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","88335566478888113100730872026267879093","51946388225474194777575662700645753175","197315576188323493713262946785415900653","257327764504468156481512776832539524498","18290083798357938132127413292799758667"],"threshold":0.9},"id":"ASB-A-451602444-f0c8fb5d"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"addDynamicShortcuts"},"deprecated":false,"digest":{"length":1004,"function_hash":"339601222863008298004896354620578186100"},"id":"ASB-A-451602444-f341c015","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"line_hashes":["44405926164414503192084927431512153483","73202613135253157574059196717318340133","122167814141206288150958299547817999390","176928125621801936187774279080062910073","322599985930554494454927287007178773133","168994455637200040229000210232617296035","53266723288218393473645268090686492284","137927480048053744885256671744474823113","105688116268553433994864201142467111117","309285280475492546658054702865686837097","39514571796303988645577690689526005488","181552557333642009193007209191113011976","200230581385119980691022524891581658190","24878551406797363143072882735845173059","9704609004820645892396460101806803745","49693357618112692414869492575969841541","105427887079565036822247400785116675653","104286463096465087049312105096850732715","185461472639915053459245035017216456300","64023080197095620882668474144496717940","272775078542805382455308614733401320132","102792364210649161439142880292239661121","63141562171763322478800604793352934238","50998681473702837697825569607044621531","66544120841341846504531158514793645211","68638600120929848654051351125053166048","225841469021538359120828311401160908345","193556402113540194802929281064100945689","81263628489069249796488531101893729361","185461472639915053459245035017216456300","91854003919610908140064292593648277183","139141714570976558405613396746328921034","7837566960675798085608326395255348182","148582332128900279170251298737550662511","2298346726206255872767168123200929481","245207774769982457103116805732430923745","72248465885943195943265694122030866987","62743994008029875967557052228074179800","176496848323231487834229061326242633330","60650917780212746428832255148675169484","310828251791335430773171425387740346847","332253565430931152421723757225087732412","194993172026741416427082180164648584752","194829885017046164417090838433564128606","66601450387102351477680977223157805803","187686037100948270343813786846529257275","194744495858166621079695193580827518066","182613337507084301170034882134267966999","313819311837287173201563004960537993486","229846811245001283162204352868400334425","194744495858166621079695193580827518066","182613337507084301170034882134267966999","313819311837287173201563004960537993486","208825130403199421625512660796325659286","194744495858166621079695193580827518066","182613337507084301170034882134267966999","313819311837287173201563004960537993486","229846811245001283162204352868400334425","72317996232012219745986339676090739942","152059497658556795823540810024303095395","197882789744934589903073205891598759015","254530068836766894850300107498387948954"],"threshold":0.9},"id":"ASB-A-451602444-ff49ef74","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb","https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b","https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"318983710540196843273684549113788618325","length":1209},"id":"ASB-A-451602444-16ecc483","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"setDynamicShortcuts"}},{"deprecated":false,"digest":{"length":951,"function_hash":"34293032210490228558487340659867651131"},"id":"ASB-A-451602444-27d79310","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540","target":{"function":"addDynamicShortcuts","file":"services/core/java/com/android/server/pm/ShortcutService.java"}},{"digest":{"length":4451,"function_hash":"103018159512582308872258870356973652294"},"id":"ASB-A-451602444-2f4662c4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540","target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java","function":"testShortcutInfoMissingMandatoryFields"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["100618827025222456214751250299302262147","286530393883377075119530082321081462879","133588259433069124176881219414664279811","159054121081670191455971045531408269899","285409131900921830757293120523161888598","157039079928944337592054572547956496949","22738083221792164449155068249630837209","34811939372867685117369411304260014850","323361789254308862404973638443262443473","312829556133467067674456375116940128058","330115838233315093872204878226476076920","49379818860543610095124811669222887346","286690564095318448724667662454797823606","186203593297633018793551255909599452045","10928554456528628724849569667322868797","2718798138870330089531583893679522253","21220389763846704822803287709106205400","182876723559962202617446026477368357808","124984314299000142035825172815742487109","187686037100948270343813786846529257275","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","255520439221415030304095898816845586601","220009168948288049530746349607475027773","283841965564621843934980190153004253387","42878899071815562444310277103980723863","321929901381648741112357344339524583280","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","88335566478888113100730872026267879093","51946388225474194777575662700645753175","183373815776437101437553035022405862300","325515252994056304881639932539807854245","222405467365552367942807604002764112303"]},"id":"ASB-A-451602444-45d1869f","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"updateShortcuts"},"deprecated":false,"digest":{"function_hash":"71412220942630048063950836074130040710","length":1703},"id":"ASB-A-451602444-8ba54708","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["97091192253155090159680690690253751681","287521650325813515300594181366167863772","193132984190381195312198466348957792770","177481907760786459296346074876088483190"]},"id":"ASB-A-451602444-c90b917e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540","target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"}},{"deprecated":false,"digest":{"length":1044,"function_hash":"114175057358879051190754868453971055375"},"id":"ASB-A-451602444-d7298c87","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540","target":{"function":"ShortcutInfo","file":"core/java/android/content/pm/ShortcutInfo.java"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"pushDynamicShortcut"},"deprecated":false,"digest":{"function_hash":"171965400896051859916858482205845146818","length":885},"id":"ASB-A-451602444-ee8bc1e4","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540","target":{"file":"core/java/android/content/pm/ShortcutInfo.java"},"deprecated":false,"digest":{"line_hashes":["237901262931818598654165269404324731276","188665387038877244831902310914647169529","293030020031976047340834094438576543426","174068398987877512796358893514460170855","295437594364688430501389381974127258714","155544016385942242631721087576116245716","20666050734034983287765684298196125765","37990182455935330603233466065693768892","235044486346499461438481269355907735371","45126384062079443228524172241608301811","96201268035272855790580296819035371538","327861511168087302278812803253482291792","70953044295502323201936215352972950723","144763058216460005334686430221170381371","33620401118033557648716849166454018115","100603917343991467486286750332286447268","111922013453599462532259127514077874744","228469783096861006051920247900687388770"],"threshold":0.9},"id":"ASB-A-451602444-f7ad9a39","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"updateShortcuts"},"deprecated":false,"digest":{"function_hash":"71412220942630048063950836074130040710","length":1703},"id":"ASB-A-451602444-0e5a8a60","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce"},{"deprecated":false,"digest":{"line_hashes":["97091192253155090159680690690253751681","287521650325813515300594181366167863772","193132984190381195312198466348957792770","177481907760786459296346074876088483190"],"threshold":0.9},"id":"ASB-A-451602444-3de55d2c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce","target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce","target":{"function":"testShortcutInfoMissingMandatoryFields","file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"},"deprecated":false,"digest":{"function_hash":"103018159512582308872258870356973652294","length":4451},"id":"ASB-A-451602444-54a1b961","signature_type":"Function"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce","target":{"function":"pushDynamicShortcut","file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"function_hash":"171965400896051859916858482205845146818","length":885},"id":"ASB-A-451602444-5d05306c","signature_type":"Function"},{"deprecated":false,"digest":{"length":1209,"function_hash":"318983710540196843273684549113788618325"},"id":"ASB-A-451602444-72a6b198","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"setDynamicShortcuts"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce","target":{"file":"core/java/android/content/pm/ShortcutInfo.java","function":"ShortcutInfo"},"deprecated":false,"digest":{"function_hash":"114175057358879051190754868453971055375","length":1044},"id":"ASB-A-451602444-8689c631","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["237901262931818598654165269404324731276","188665387038877244831902310914647169529","293030020031976047340834094438576543426","174068398987877512796358893514460170855","295437594364688430501389381974127258714","155544016385942242631721087576116245716","20666050734034983287765684298196125765","37990182455935330603233466065693768892","235044486346499461438481269355907735371","45126384062079443228524172241608301811","96201268035272855790580296819035371538","327861511168087302278812803253482291792","70953044295502323201936215352972950723","144763058216460005334686430221170381371","33620401118033557648716849166454018115","100603917343991467486286750332286447268","111922013453599462532259127514077874744","228469783096861006051920247900687388770"],"threshold":0.9},"id":"ASB-A-451602444-c480fe62","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce","target":{"file":"core/java/android/content/pm/ShortcutInfo.java"},"deprecated":false},{"digest":{"line_hashes":["100618827025222456214751250299302262147","286530393883377075119530082321081462879","133588259433069124176881219414664279811","159054121081670191455971045531408269899","285409131900921830757293120523161888598","157039079928944337592054572547956496949","22738083221792164449155068249630837209","34811939372867685117369411304260014850","323361789254308862404973638443262443473","267946729309153649786716065316753413522","336421579970259556127966568279106477320","49379818860543610095124811669222887346","286690564095318448724667662454797823606","186203593297633018793551255909599452045","10928554456528628724849569667322868797","2718798138870330089531583893679522253","21220389763846704822803287709106205400","182876723559962202617446026477368357808","124984314299000142035825172815742487109","187686037100948270343813786846529257275","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","255520439221415030304095898816845586601","220009168948288049530746349607475027773","283841965564621843934980190153004253387","42878899071815562444310277103980723863","321929901381648741112357344339524583280","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","88335566478888113100730872026267879093","51946388225474194777575662700645753175","183373815776437101437553035022405862300","325515252994056304881639932539807854245","222405467365552367942807604002764112303"],"threshold":0.9},"id":"ASB-A-451602444-dce5758c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce","target":{"function":"addDynamicShortcuts","file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"function_hash":"34293032210490228558487340659867651131","length":951},"id":"ASB-A-451602444-fb886282","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"line_hashes":["100618827025222456214751250299302262147","286530393883377075119530082321081462879","133588259433069124176881219414664279811","159054121081670191455971045531408269899","285409131900921830757293120523161888598","157039079928944337592054572547956496949","22738083221792164449155068249630837209","34811939372867685117369411304260014850","323361789254308862404973638443262443473","267946729309153649786716065316753413522","336421579970259556127966568279106477320","49379818860543610095124811669222887346","286690564095318448724667662454797823606","186203593297633018793551255909599452045","10928554456528628724849569667322868797","2718798138870330089531583893679522253","21220389763846704822803287709106205400","182876723559962202617446026477368357808","124984314299000142035825172815742487109","187686037100948270343813786846529257275","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","255520439221415030304095898816845586601","220009168948288049530746349607475027773","283841965564621843934980190153004253387","42878899071815562444310277103980723863","321929901381648741112357344339524583280","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","88335566478888113100730872026267879093","51946388225474194777575662700645753175","183373815776437101437553035022405862300","325515252994056304881639932539807854245","222405467365552367942807604002764112303"],"threshold":0.9},"id":"ASB-A-451602444-0c743c8c","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"length":1044,"function_hash":"114175057358879051190754868453971055375"},"id":"ASB-A-451602444-0e6e227f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b","target":{"file":"core/java/android/content/pm/ShortcutInfo.java","function":"ShortcutInfo"}},{"deprecated":false,"digest":{"function_hash":"103018159512582308872258870356973652294","length":4451},"id":"ASB-A-451602444-18bfda5b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b","target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java","function":"testShortcutInfoMissingMandatoryFields"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"updateShortcuts"},"deprecated":false,"digest":{"length":1703,"function_hash":"71412220942630048063950836074130040710"},"id":"ASB-A-451602444-3402ed34"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b","target":{"file":"core/java/android/content/pm/ShortcutInfo.java"},"deprecated":false,"digest":{"line_hashes":["237901262931818598654165269404324731276","188665387038877244831902310914647169529","293030020031976047340834094438576543426","174068398987877512796358893514460170855","295437594364688430501389381974127258714","155544016385942242631721087576116245716","20666050734034983287765684298196125765","37990182455935330603233466065693768892","235044486346499461438481269355907735371","45126384062079443228524172241608301811","96201268035272855790580296819035371538","327861511168087302278812803253482291792","70953044295502323201936215352972950723","144763058216460005334686430221170381371","33620401118033557648716849166454018115","100603917343991467486286750332286447268","111922013453599462532259127514077874744","228469783096861006051920247900687388770"],"threshold":0.9},"id":"ASB-A-451602444-9f3e8680"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b","target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"},"deprecated":false,"digest":{"line_hashes":["97091192253155090159680690690253751681","287521650325813515300594181366167863772","193132984190381195312198466348957792770","177481907760786459296346074876088483190"],"threshold":0.9},"id":"ASB-A-451602444-bc1bfed7"},{"deprecated":false,"digest":{"function_hash":"171965400896051859916858482205845146818","length":885},"id":"ASB-A-451602444-c3b8813a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b","target":{"function":"pushDynamicShortcut","file":"services/core/java/com/android/server/pm/ShortcutService.java"}},{"deprecated":false,"digest":{"length":951,"function_hash":"34293032210490228558487340659867651131"},"id":"ASB-A-451602444-d16f53ab","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"addDynamicShortcuts"}},{"digest":{"function_hash":"318983710540196843273684549113788618325","length":1209},"id":"ASB-A-451602444-d27e1993","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"setDynamicShortcuts"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27"],"severity":"High","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["100618827025222456214751250299302262147","286530393883377075119530082321081462879","133588259433069124176881219414664279811","159054121081670191455971045531408269899","285409131900921830757293120523161888598","157039079928944337592054572547956496949","22738083221792164449155068249630837209","34811939372867685117369411304260014850","323361789254308862404973638443262443473","267946729309153649786716065316753413522","336421579970259556127966568279106477320","49379818860543610095124811669222887346","286690564095318448724667662454797823606","186203593297633018793551255909599452045","10928554456528628724849569667322868797","2718798138870330089531583893679522253","21220389763846704822803287709106205400","182876723559962202617446026477368357808","124984314299000142035825172815742487109","187686037100948270343813786846529257275","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","255520439221415030304095898816845586601","220009168948288049530746349607475027773","283841965564621843934980190153004253387","42878899071815562444310277103980723863","321929901381648741112357344339524583280","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","88335566478888113100730872026267879093","51946388225474194777575662700645753175","197315576188323493713262946785415900653","257327764504468156481512776832539524498","18290083798357938132127413292799758667"]},"id":"ASB-A-451602444-08c13928","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27","target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"},"deprecated":false,"digest":{"line_hashes":["97091192253155090159680690690253751681","287521650325813515300594181366167863772","193132984190381195312198466348957792770","177481907760786459296346074876088483190"],"threshold":0.9},"id":"ASB-A-451602444-490ae99a","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27","target":{"function":"testShortcutInfoMissingMandatoryFields","file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"},"deprecated":false,"digest":{"function_hash":"103018159512582308872258870356973652294","length":4451},"id":"ASB-A-451602444-4964a96e","signature_type":"Function"},{"id":"ASB-A-451602444-964d36c3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"addDynamicShortcuts"},"deprecated":false,"digest":{"function_hash":"339601222863008298004896354620578186100","length":1004}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27","target":{"file":"core/java/android/content/pm/ShortcutInfo.java","function":"ShortcutInfo"},"deprecated":false,"digest":{"function_hash":"114175057358879051190754868453971055375","length":1044},"id":"ASB-A-451602444-b6c0cfa0","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":1262,"function_hash":"94567466273624967033616009761319529129"},"id":"ASB-A-451602444-b9b96a7e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27","target":{"function":"setDynamicShortcuts","file":"services/core/java/com/android/server/pm/ShortcutService.java"}},{"digest":{"function_hash":"28750293430185058674802037971294379389","length":932},"id":"ASB-A-451602444-d7da69cd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"pushDynamicShortcut"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27","target":{"file":"core/java/android/content/pm/ShortcutInfo.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["237901262931818598654165269404324731276","188665387038877244831902310914647169529","293030020031976047340834094438576543426","174068398987877512796358893514460170855","295437594364688430501389381974127258714","155544016385942242631721087576116245716","20666050734034983287765684298196125765","37990182455935330603233466065693768892","235044486346499461438481269355907735371","45126384062079443228524172241608301811","96201268035272855790580296819035371538","327861511168087302278812803253482291792","70953044295502323201936215352972950723","144763058216460005334686430221170381371","33620401118033557648716849166454018115","100603917343991467486286750332286447268","111922013453599462532259127514077874744","228469783096861006051920247900687388770"]},"id":"ASB-A-451602444-e6299949","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"updateShortcuts"},"deprecated":false,"digest":{"function_hash":"71412220942630048063950836074130040710","length":1703},"id":"ASB-A-451602444-fcdbc3cd"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"},"deprecated":false,"digest":{"line_hashes":["100618827025222456214751250299302262147","286530393883377075119530082321081462879","133588259433069124176881219414664279811","159054121081670191455971045531408269899","40250614945690976328714534111887374960","157039079928944337592054572547956496949","22738083221792164449155068249630837209","34811939372867685117369411304260014850","323361789254308862404973638443262443473","322835205800953069906274331529097190221","131858856584697455465792215535198040585","49379818860543610095124811669222887346","286690564095318448724667662454797823606","186203593297633018793551255909599452045","10928554456528628724849569667322868797","2718798138870330089531583893679522253","21220389763846704822803287709106205400","182876723559962202617446026477368357808","124984314299000142035825172815742487109","187686037100948270343813786846529257275","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","255520439221415030304095898816845586601","220009168948288049530746349607475027773","283841965564621843934980190153004253387","42878899071815562444310277103980723863","321929901381648741112357344339524583280","220009168948288049530746349607475027773","283841965564621843934980190153004253387","154274304223043419759079054996356482577","88335566478888113100730872026267879093","51946388225474194777575662700645753175","183373815776437101437553035022405862300","325515252994056304881639932539807854245","222405467365552367942807604002764112303"],"threshold":0.9},"id":"ASB-A-451602444-31369226","signature_type":"Line","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5","target":{"file":"core/java/android/content/pm/ShortcutInfo.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["237901262931818598654165269404324731276","188665387038877244831902310914647169529","293030020031976047340834094438576543426","174068398987877512796358893514460170855","295437594364688430501389381974127258714","155544016385942242631721087576116245716","20666050734034983287765684298196125765","37990182455935330603233466065693768892","235044486346499461438481269355907735371","45126384062079443228524172241608301811","96201268035272855790580296819035371538","327861511168087302278812803253482291792","70953044295502323201936215352972950723","144763058216460005334686430221170381371","33620401118033557648716849166454018115","100603917343991467486286750332286447268","111922013453599462532259127514077874744","228469783096861006051920247900687388770"]},"id":"ASB-A-451602444-39dd9d2e"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5","target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"},"deprecated":false,"digest":{"line_hashes":["97091192253155090159680690690253751681","287521650325813515300594181366167863772","193132984190381195312198466348957792770","177481907760786459296346074876088483190"],"threshold":0.9},"id":"ASB-A-451602444-3aebe498","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"114175057358879051190754868453971055375","length":1044},"id":"ASB-A-451602444-796164ab","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5","target":{"function":"ShortcutInfo","file":"core/java/android/content/pm/ShortcutInfo.java"}},{"deprecated":false,"digest":{"function_hash":"321829752434666575755124052290594794159","length":1202},"id":"ASB-A-451602444-9342d4d6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5","target":{"function":"setDynamicShortcuts","file":"services/core/java/com/android/server/pm/ShortcutService.java"}},{"deprecated":false,"digest":{"length":878,"function_hash":"72053831430762407432456560612262857770"},"id":"ASB-A-451602444-e7d45f14","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"pushDynamicShortcut"}},{"digest":{"function_hash":"103018159512582308872258870356973652294","length":4451},"id":"ASB-A-451602444-ecb20d01","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5","target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java","function":"testShortcutInfoMissingMandatoryFields"},"deprecated":false},{"deprecated":false,"digest":{"length":1696,"function_hash":"32989098233992377005863261440417470795"},"id":"ASB-A-451602444-f87dfa8d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5","target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"updateShortcuts"}},{"target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java","function":"addDynamicShortcuts"},"deprecated":false,"digest":{"function_hash":"78155714901215305587265594459312803586","length":944},"id":"ASB-A-451602444-ffbe7625","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-451602444.json"}}],"schema_version":"1.9.2"}