{"id":"ASB-A-464276781","details":"In multiple locations, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-464276781","CVE-2026-58937"],"modified":"2026-11-02T16:56:16.217734866Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e5d6406b643788d9f66d936bb3348d99aee58ab5","target":{"file":"services/core/java/com/android/server/wm/ActivityRecord.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["236464263004891996585418043669397148744","198881159570971437156026635131743112750","59653606683927922264705039756433937286","301858457322852301036295746662582856498","250899806400551482316230859121615179083","331813971225326786159384164813889292250","153663057606008679784292455495005702731","43433435468903328799976728423904269029"]},"id":"ASB-A-464276781-136927fd"},{"target":{"file":"core/java/android/os/Bundle.java"},"deprecated":false,"digest":{"line_hashes":["187789546740305659392409098123157540066","271941043678026602588978030120733569019","253843486101408568804035991945680158119","27365725031604982415947251271323389204","144795306120294257650028479784516521805","334269375916415202989730352067928155337","46718654097487707003139674781196139461","143327765856663976985223517436023588584","324220809581283364054389648117346202679","211588902893772580806828700805722268191","232928459375778294330272951395133074108"],"threshold":0.9},"id":"ASB-A-464276781-2af31ec6","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e5d6406b643788d9f66d936bb3348d99aee58ab5"},{"id":"ASB-A-464276781-2b1ea33a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e5d6406b643788d9f66d936bb3348d99aee58ab5","target":{"function":"loadTasksForUser","file":"services/core/java/com/android/server/wm/TaskPersister.java"},"deprecated":false,"digest":{"function_hash":"223888040159523417186937796641068093545","length":968}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e5d6406b643788d9f66d936bb3348d99aee58ab5","target":{"file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["42003888257989102751632794101675033649","159172963247354714479703609247198404616","75890911830152324059623259336863958979","111776981409856838832590411329213601377","170176325671934013419124198236653763201","163389620026595291548306946712267711612","41231987831246410562363221330059313386","198950744944063162718599430101357253119","5701390856807441023319057336154644509","293805779663337875494483197050672720378","108812078767304536824291261647459902645","29082421076791179141682934561291478552"]},"id":"ASB-A-464276781-5ee6ce99","signature_type":"Line","signature_version":"v1"},{"digest":{"length":530,"function_hash":"85905630345719877449596558592700160240"},"id":"ASB-A-464276781-6facc5b3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e5d6406b643788d9f66d936bb3348d99aee58ab5","target":{"file":"services/core/java/com/android/server/wm/Task.java","function":"saveActivityToXml"},"deprecated":false},{"digest":{"length":988,"function_hash":"139164104433675101244225744383881431782"},"id":"ASB-A-464276781-73120ffe","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e5d6406b643788d9f66d936bb3348d99aee58ab5","target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java","function":"process"},"deprecated":false},{"target":{"file":"core/java/android/os/BaseBundle.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["16572069896323616638970833638179191329","63245308768722035365305847529368015539","130153640832656042388079467753665226828","262561172277722213750898069569862147392"]},"id":"ASB-A-464276781-d3864e41","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e5d6406b643788d9f66d936bb3348d99aee58ab5"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e5d6406b643788d9f66d936bb3348d99aee58ab5","target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java"},"deprecated":false,"digest":{"line_hashes":["338451176646311783381926592596420890203","197248121929605315893694953531867283703","175278035799516190272899302635036869802","328780783384404720905347772077928944713","178975075131840526451697719208130863592","298768641154136810538457390824732666581","94776468555685438714870338996507794483","130774195460680537502300078091672643848","267057826620547239082040003588939742668","105738369152231080299296920074045546959","109340625660219106734670058397885791533","265529081917106764334146139064396228849","178399344103882913353644428974242429040","30362161797322976453069554460300461328","112096963185712310968519450654201112512","148361025320937530679309273315305964739","163683375048674462526705957463525214188","308419643427254345848654708337509682239","290914248438006963453236339444355159056"],"threshold":0.9},"id":"ASB-A-464276781-fb2b7193","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e5d6406b643788d9f66d936bb3348d99aee58ab5"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-464276781.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"digest":{"function_hash":"85905630345719877449596558592700160240","length":530},"id":"ASB-A-464276781-74271edc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1dd977645ae1cfb1c1d8d3233399a9dabc0cbf92","target":{"function":"saveActivityToXml","file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1dd977645ae1cfb1c1d8d3233399a9dabc0cbf92","target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java"},"deprecated":false,"digest":{"line_hashes":["338451176646311783381926592596420890203","197248121929605315893694953531867283703","175278035799516190272899302635036869802","328780783384404720905347772077928944713","178975075131840526451697719208130863592","298768641154136810538457390824732666581","94776468555685438714870338996507794483","130774195460680537502300078091672643848","267057826620547239082040003588939742668","105738369152231080299296920074045546959","109340625660219106734670058397885791533","265529081917106764334146139064396228849","178399344103882913353644428974242429040","30362161797322976453069554460300461328","112096963185712310968519450654201112512","148361025320937530679309273315305964739","163683375048674462526705957463525214188","308419643427254345848654708337509682239","290914248438006963453236339444355159056"],"threshold":0.9},"id":"ASB-A-464276781-7d157112"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1dd977645ae1cfb1c1d8d3233399a9dabc0cbf92","target":{"file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"line_hashes":["202248075713987044994027663904860216935","174749441454204487725545249279997884412","139209942398446605944642435023078209783","236808238964097501623947521946280167941","170176325671934013419124198236653763201","163389620026595291548306946712267711612","41231987831246410562363221330059313386","198950744944063162718599430101357253119","5701390856807441023319057336154644509","293805779663337875494483197050672720378","108812078767304536824291261647459902645","29082421076791179141682934561291478552"],"threshold":0.9},"id":"ASB-A-464276781-7ef13b99"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/1dd977645ae1cfb1c1d8d3233399a9dabc0cbf92","target":{"file":"core/java/android/os/BaseBundle.java"},"deprecated":false,"digest":{"line_hashes":["60502035371109798618509643299073538600","39507201643767034428975772981888540782","49798848153881533243261703095152670223"],"threshold":0.9},"id":"ASB-A-464276781-8bfda20c","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["108118350889926114879391734748331352360","132378592926737296486463148243909099484","172424002984256757063904392270574478399","27365725031604982415947251271323389204","144795306120294257650028479784516521805","334269375916415202989730352067928155337","46718654097487707003139674781196139461","143327765856663976985223517436023588584","324220809581283364054389648117346202679","211588902893772580806828700805722268191","232928459375778294330272951395133074108"]},"id":"ASB-A-464276781-b1f48288","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1dd977645ae1cfb1c1d8d3233399a9dabc0cbf92","target":{"file":"core/java/android/os/Bundle.java"}},{"target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java","function":"loadTasksForUser"},"deprecated":false,"digest":{"length":968,"function_hash":"223888040159523417186937796641068093545"},"id":"ASB-A-464276781-b8ceccb5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1dd977645ae1cfb1c1d8d3233399a9dabc0cbf92"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/1dd977645ae1cfb1c1d8d3233399a9dabc0cbf92","target":{"file":"services/core/java/com/android/server/wm/ActivityRecord.java"},"deprecated":false,"digest":{"line_hashes":["236464263004891996585418043669397148744","198881159570971437156026635131743112750","59653606683927922264705039756433937286","301858457322852301036295746662582856498","250899806400551482316230859121615179083","331813971225326786159384164813889292250","153663057606008679784292455495005702731","43433435468903328799976728423904269029"],"threshold":0.9},"id":"ASB-A-464276781-dcace1fb","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/1dd977645ae1cfb1c1d8d3233399a9dabc0cbf92","target":{"function":"process","file":"services/core/java/com/android/server/wm/TaskPersister.java"},"deprecated":false,"digest":{"function_hash":"139164104433675101244225744383881431782","length":988},"id":"ASB-A-464276781-e080ec53","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1dd977645ae1cfb1c1d8d3233399a9dabc0cbf92"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-464276781.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fb3b633781d9ba8f3d1acb37446683bad2ec32a4","target":{"function":"process","file":"services/core/java/com/android/server/wm/TaskPersister.java"},"deprecated":false,"digest":{"function_hash":"139164104433675101244225744383881431782","length":988},"id":"ASB-A-464276781-3b52b586","signature_type":"Function"},{"target":{"file":"core/java/android/os/BaseBundle.java"},"deprecated":false,"digest":{"line_hashes":["60502035371109798618509643299073538600","39507201643767034428975772981888540782","49798848153881533243261703095152670223"],"threshold":0.9},"id":"ASB-A-464276781-4a3a4468","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fb3b633781d9ba8f3d1acb37446683bad2ec32a4"},{"deprecated":false,"digest":{"line_hashes":["338451176646311783381926592596420890203","197248121929605315893694953531867283703","175278035799516190272899302635036869802","328780783384404720905347772077928944713","178975075131840526451697719208130863592","298768641154136810538457390824732666581","94776468555685438714870338996507794483","130774195460680537502300078091672643848","267057826620547239082040003588939742668","105738369152231080299296920074045546959","109340625660219106734670058397885791533","265529081917106764334146139064396228849","178399344103882913353644428974242429040","30362161797322976453069554460300461328","112096963185712310968519450654201112512","148361025320937530679309273315305964739","163683375048674462526705957463525214188","308419643427254345848654708337509682239","290914248438006963453236339444355159056"],"threshold":0.9},"id":"ASB-A-464276781-888f1891","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fb3b633781d9ba8f3d1acb37446683bad2ec32a4","target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java"}},{"id":"ASB-A-464276781-8df173bf","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fb3b633781d9ba8f3d1acb37446683bad2ec32a4","target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java","function":"loadTasksForUser"},"deprecated":false,"digest":{"length":968,"function_hash":"223888040159523417186937796641068093545"}},{"id":"ASB-A-464276781-9c3aa41a","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fb3b633781d9ba8f3d1acb37446683bad2ec32a4","target":{"file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"line_hashes":["305581345662554600066612390307069391495","68974414936947029218115297668771416050","126585638568930491950971932085906823618","287309376172631538966108308620064566807","170176325671934013419124198236653763201","163389620026595291548306946712267711612","41231987831246410562363221330059313386","198950744944063162718599430101357253119","5701390856807441023319057336154644509","293805779663337875494483197050672720378","108812078767304536824291261647459902645","29082421076791179141682934561291478552"],"threshold":0.9}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fb3b633781d9ba8f3d1acb37446683bad2ec32a4","target":{"file":"core/java/android/os/Bundle.java"},"deprecated":false,"digest":{"line_hashes":["294591865662638947964790336286832741086","301964569273094447750501081626658415413","172424002984256757063904392270574478399","27365725031604982415947251271323389204","144795306120294257650028479784516521805","334269375916415202989730352067928155337","46718654097487707003139674781196139461","143327765856663976985223517436023588584","324220809581283364054389648117346202679","211588902893772580806828700805722268191","232928459375778294330272951395133074108"],"threshold":0.9},"id":"ASB-A-464276781-cb220daf"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/fb3b633781d9ba8f3d1acb37446683bad2ec32a4","target":{"file":"services/core/java/com/android/server/wm/ActivityRecord.java"},"deprecated":false,"digest":{"line_hashes":["236464263004891996585418043669397148744","198881159570971437156026635131743112750","59653606683927922264705039756433937286","98381920882922189181896397980505478306","273187153939472888649042866437090926292","331813971225326786159384164813889292250","153663057606008679784292455495005702731","43433435468903328799976728423904269029"],"threshold":0.9},"id":"ASB-A-464276781-eabdb9b4","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fb3b633781d9ba8f3d1acb37446683bad2ec32a4","target":{"function":"saveActivityToXml","file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"length":530,"function_hash":"85905630345719877449596558592700160240"},"id":"ASB-A-464276781-ff502df5"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fb3b633781d9ba8f3d1acb37446683bad2ec32a4"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-464276781.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"digest":{"line_hashes":["236464263004891996585418043669397148744","198881159570971437156026635131743112750","59653606683927922264705039756433937286","98381920882922189181896397980505478306","273187153939472888649042866437090926292","331813971225326786159384164813889292250","153663057606008679784292455495005702731","43433435468903328799976728423904269029"],"threshold":0.9},"id":"ASB-A-464276781-39a6da57","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d3fe12179715bdf3227757795bb25a2611d3d1a9","target":{"file":"services/core/java/com/android/server/wm/ActivityRecord.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d3fe12179715bdf3227757795bb25a2611d3d1a9","target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java"},"deprecated":false,"digest":{"line_hashes":["338451176646311783381926592596420890203","197248121929605315893694953531867283703","175278035799516190272899302635036869802","328780783384404720905347772077928944713","178975075131840526451697719208130863592","298768641154136810538457390824732666581","94776468555685438714870338996507794483","130774195460680537502300078091672643848","267057826620547239082040003588939742668","105738369152231080299296920074045546959","109340625660219106734670058397885791533","265529081917106764334146139064396228849","178399344103882913353644428974242429040","30362161797322976453069554460300461328","112096963185712310968519450654201112512","148361025320937530679309273315305964739","163683375048674462526705957463525214188","308419643427254345848654708337509682239","290914248438006963453236339444355159056"],"threshold":0.9},"id":"ASB-A-464276781-41b5fb78","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/d3fe12179715bdf3227757795bb25a2611d3d1a9","target":{"file":"core/java/android/os/BaseBundle.java"},"deprecated":false,"digest":{"line_hashes":["60502035371109798618509643299073538600","39507201643767034428975772981888540782","49798848153881533243261703095152670223"],"threshold":0.9},"id":"ASB-A-464276781-48b3a94a","signature_type":"Line","signature_version":"v1"},{"target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java","function":"process"},"deprecated":false,"digest":{"length":988,"function_hash":"139164104433675101244225744383881431782"},"id":"ASB-A-464276781-569d21c2","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d3fe12179715bdf3227757795bb25a2611d3d1a9"},{"digest":{"function_hash":"85905630345719877449596558592700160240","length":530},"id":"ASB-A-464276781-741b9fa4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d3fe12179715bdf3227757795bb25a2611d3d1a9","target":{"function":"saveActivityToXml","file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"223888040159523417186937796641068093545","length":968},"id":"ASB-A-464276781-9773fed0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d3fe12179715bdf3227757795bb25a2611d3d1a9","target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java","function":"loadTasksForUser"}},{"target":{"file":"core/java/android/os/Bundle.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["294591865662638947964790336286832741086","301964569273094447750501081626658415413","172424002984256757063904392270574478399","27365725031604982415947251271323389204","144795306120294257650028479784516521805","334269375916415202989730352067928155337","46718654097487707003139674781196139461","143327765856663976985223517436023588584","324220809581283364054389648117346202679","211588902893772580806828700805722268191","232928459375778294330272951395133074108"]},"id":"ASB-A-464276781-bc344d39","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d3fe12179715bdf3227757795bb25a2611d3d1a9"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d3fe12179715bdf3227757795bb25a2611d3d1a9","target":{"file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["305581345662554600066612390307069391495","68974414936947029218115297668771416050","126585638568930491950971932085906823618","287309376172631538966108308620064566807","170176325671934013419124198236653763201","163389620026595291548306946712267711612","41231987831246410562363221330059313386","198950744944063162718599430101357253119","5701390856807441023319057336154644509","293805779663337875494483197050672720378","108812078767304536824291261647459902645","29082421076791179141682934561291478552"]},"id":"ASB-A-464276781-dcc06596"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d3fe12179715bdf3227757795bb25a2611d3d1a9"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-464276781.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"length":968,"function_hash":"223888040159523417186937796641068093545"},"id":"ASB-A-464276781-239091eb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/23380316f225bde83869ab6fc0188c79cfab22f6","target":{"function":"loadTasksForUser","file":"services/core/java/com/android/server/wm/TaskPersister.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/23380316f225bde83869ab6fc0188c79cfab22f6","target":{"file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["321512668055279058780636161117600427645","325524561210175316145687368238984706486","75890911830152324059623259336863958979","111776981409856838832590411329213601377","170176325671934013419124198236653763201","163389620026595291548306946712267711612","41231987831246410562363221330059313386","198950744944063162718599430101357253119","5701390856807441023319057336154644509","293805779663337875494483197050672720378","108812078767304536824291261647459902645","29082421076791179141682934561291478552"]},"id":"ASB-A-464276781-4faf77b8"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/23380316f225bde83869ab6fc0188c79cfab22f6","target":{"file":"core/java/android/os/BaseBundle.java"},"deprecated":false,"digest":{"line_hashes":["60502035371109798618509643299073538600","39507201643767034428975772981888540782","49798848153881533243261703095152670223"],"threshold":0.9},"id":"ASB-A-464276781-c5a3829e","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/23380316f225bde83869ab6fc0188c79cfab22f6","target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java","function":"process"},"deprecated":false,"digest":{"function_hash":"139164104433675101244225744383881431782","length":988},"id":"ASB-A-464276781-c6cfa8bf","signature_type":"Function"},{"target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java"},"deprecated":false,"digest":{"line_hashes":["338451176646311783381926592596420890203","197248121929605315893694953531867283703","175278035799516190272899302635036869802","328780783384404720905347772077928944713","178975075131840526451697719208130863592","298768641154136810538457390824732666581","94776468555685438714870338996507794483","130774195460680537502300078091672643848","267057826620547239082040003588939742668","105738369152231080299296920074045546959","109340625660219106734670058397885791533","265529081917106764334146139064396228849","178399344103882913353644428974242429040","30362161797322976453069554460300461328","112096963185712310968519450654201112512","148361025320937530679309273315305964739","163683375048674462526705957463525214188","308419643427254345848654708337509682239","290914248438006963453236339444355159056"],"threshold":0.9},"id":"ASB-A-464276781-deed8f21","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/23380316f225bde83869ab6fc0188c79cfab22f6"},{"id":"ASB-A-464276781-e07eee79","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/23380316f225bde83869ab6fc0188c79cfab22f6","target":{"function":"saveActivityToXml","file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"length":530,"function_hash":"85905630345719877449596558592700160240"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/23380316f225bde83869ab6fc0188c79cfab22f6","target":{"file":"core/java/android/os/Bundle.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["294591865662638947964790336286832741086","301964569273094447750501081626658415413","172424002984256757063904392270574478399","27365725031604982415947251271323389204","144795306120294257650028479784516521805","334269375916415202989730352067928155337","46718654097487707003139674781196139461","143327765856663976985223517436023588584","324220809581283364054389648117346202679","211588902893772580806828700805722268191","232928459375778294330272951395133074108"]},"id":"ASB-A-464276781-e0f6ed06","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/23380316f225bde83869ab6fc0188c79cfab22f6","target":{"file":"services/core/java/com/android/server/wm/ActivityRecord.java"},"deprecated":false,"digest":{"line_hashes":["236464263004891996585418043669397148744","198881159570971437156026635131743112750","121989918948263626632558541068507404411","65410496875880012453847567904654817296","62972511579576007434441248648815878890","331813971225326786159384164813889292250","153663057606008679784292455495005702731","43433435468903328799976728423904269029"],"threshold":0.9},"id":"ASB-A-464276781-f6bc25b1","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/23380316f225bde83869ab6fc0188c79cfab22f6"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-464276781.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/756b83d7f611ae576317fbf9e98d32a14e5ddf82","target":{"function":"saveActivityToXml","file":"services/core/java/com/android/server/wm/Task.java"},"deprecated":false,"digest":{"function_hash":"85905630345719877449596558592700160240","length":530},"id":"ASB-A-464276781-3f23baa8"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/756b83d7f611ae576317fbf9e98d32a14e5ddf82","target":{"file":"services/core/java/com/android/server/wm/TaskPersister.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["338451176646311783381926592596420890203","197248121929605315893694953531867283703","175278035799516190272899302635036869802","328780783384404720905347772077928944713","178975075131840526451697719208130863592","298768641154136810538457390824732666581","94776468555685438714870338996507794483","130774195460680537502300078091672643848","144380832668255560668143183548442845950","269060557469868662021669279843610382305","333187564587174054162375147786030123491","335350393094788037780644544060126172872","140204115606018678323118269647966600528","169927541107786661798632723637190312331","112096963185712310968519450654201112512","148361025320937530679309273315305964739","163683375048674462526705957463525214188","308419643427254345848654708337509682239","290914248438006963453236339444355159056"]},"id":"ASB-A-464276781-4ef6e9e2"},{"deprecated":false,"digest":{"line_hashes":["202248075713987044994027663904860216935","174749441454204487725545249279997884412","139209942398446605944642435023078209783","236808238964097501623947521946280167941","170176325671934013419124198236653763201","163389620026595291548306946712267711612","41231987831246410562363221330059313386","198950744944063162718599430101357253119","5701390856807441023319057336154644509","293805779663337875494483197050672720378","108812078767304536824291261647459902645","29082421076791179141682934561291478552"],"threshold":0.9},"id":"ASB-A-464276781-5506af30","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/756b83d7f611ae576317fbf9e98d32a14e5ddf82","target":{"file":"services/core/java/com/android/server/wm/Task.java"}},{"digest":{"length":988,"function_hash":"11977949648702949802163014477981550772"},"id":"ASB-A-464276781-77fab6fb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/756b83d7f611ae576317fbf9e98d32a14e5ddf82","target":{"function":"process","file":"services/core/java/com/android/server/wm/TaskPersister.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/756b83d7f611ae576317fbf9e98d32a14e5ddf82","target":{"file":"core/java/android/os/Bundle.java"},"deprecated":false,"digest":{"line_hashes":["4758261451693374799091920147179211647","132378592926737296486463148243909099484","172424002984256757063904392270574478399","27365725031604982415947251271323389204","144795306120294257650028479784516521805","334269375916415202989730352067928155337","46718654097487707003139674781196139461","143327765856663976985223517436023588584","324220809581283364054389648117346202679","211588902893772580806828700805722268191","232928459375778294330272951395133074108"],"threshold":0.9},"id":"ASB-A-464276781-8720b3a2","signature_type":"Line"},{"id":"ASB-A-464276781-b9e99e84","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/756b83d7f611ae576317fbf9e98d32a14e5ddf82","target":{"file":"services/core/java/com/android/server/wm/ActivityRecord.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["236464263004891996585418043669397148744","198881159570971437156026635131743112750","59653606683927922264705039756433937286","301858457322852301036295746662582856498","250899806400551482316230859121615179083","331813971225326786159384164813889292250","153663057606008679784292455495005702731","43433435468903328799976728423904269029"]}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/756b83d7f611ae576317fbf9e98d32a14e5ddf82","target":{"function":"restoreTasksForUserLocked","file":"services/core/java/com/android/server/wm/TaskPersister.java"},"deprecated":false,"digest":{"function_hash":"285938571572677006754039480516374318357","length":3524},"id":"ASB-A-464276781-c98ab631","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/756b83d7f611ae576317fbf9e98d32a14e5ddf82","target":{"file":"core/java/android/os/BaseBundle.java"},"deprecated":false,"digest":{"line_hashes":["60502035371109798618509643299073538600","39507201643767034428975772981888540782","49798848153881533243261703095152670223"],"threshold":0.9},"id":"ASB-A-464276781-eb905b43","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/756b83d7f611ae576317fbf9e98d32a14e5ddf82"],"severity":"High","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-464276781.json"}}],"schema_version":"1.9.2"}