{"id":"ASB-A-477278752","details":"In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-477278752","CVE-2026-28655"],"modified":"2026-09-09T15:15:54.249544283Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","https://android.googlesource.com/platform/frameworks/base/+/e1b25527c312b0d87b5399ca383d2864c9767738"],"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"function":"createFromProto","file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"length":8216,"function_hash":"133016135388923618639507777539297097614"},"id":"ASB-A-477278752-04cf525a","signature_type":"Function","signature_version":"v1"},{"target":{"file":"core/java/android/widget/RemoteViews.java","function":"ReflectionAction"},"deprecated":false,"digest":{"function_hash":"28811265053569389025803239576793856710","length":1831},"id":"ASB-A-477278752-24710e1e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e1b25527c312b0d87b5399ca383d2864c9767738"},{"digest":{"function_hash":"9994182176971015894697859990108012656","length":188},"id":"ASB-A-477278752-3398d81b","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"function":"getOrPut","file":"core/java/android/widget/RemoteViews.java"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"file":"core/java/android/widget/RemoteViews.java","function":"updateAppInfo"},"deprecated":false,"digest":{"function_hash":"290894030536038680173581658434561582570","length":247},"id":"ASB-A-477278752-3d26f6b5","match_only_versions":["17-next"],"signature_type":"Function"},{"target":{"file":"core/java/android/widget/RemoteViews.java","function":"writeToParcel"},"deprecated":false,"digest":{"function_hash":"93107526426490936970039536435828512640","length":1400},"id":"ASB-A-477278752-4a494a6e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351"},{"deprecated":false,"digest":{"function_hash":"16994374804030412417113506351751959380","length":1965},"id":"ASB-A-477278752-61a1b948","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"file":"core/java/android/widget/RemoteViews.java","function":"RemoteViews"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"file":"core/java/android/widget/RemoteViews.java","function":"RemoteViews"},"deprecated":false,"digest":{"function_hash":"61885057388053333730884764777919114265","length":594},"id":"ASB-A-477278752-63c4def4","match_only_versions":["17-next"],"signature_type":"Function"},{"id":"ASB-A-477278752-764324ea","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"file":"core/java/android/widget/RemoteViews.java","function":"getPackageUserKey"},"deprecated":false,"digest":{"function_hash":"211388867937786092862421648801551540328","length":174}},{"id":"ASB-A-477278752-7fc35308","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"file":"core/java/android/widget/RemoteViews.java","function":"configureDescendantsAsChildren"},"deprecated":false,"digest":{"length":414,"function_hash":"215480526812971298458912294331274952020"}},{"target":{"file":"core/java/android/widget/RemoteViews.java","function":"RemoteViews"},"deprecated":false,"digest":{"function_hash":"300842557745688238745139010439498662086","length":142},"id":"ASB-A-477278752-92866ac1","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351"},{"digest":{"function_hash":"246675934437238503542198390557556280727","length":206},"id":"ASB-A-477278752-9fbb147b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"function":"reconstructCaches","file":"core/java/android/widget/RemoteViews.java"},"deprecated":false},{"digest":{"length":165,"function_hash":"182735698874485924153288693003848191248"},"id":"ASB-A-477278752-a85d3fc0","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"file":"core/java/android/widget/RemoteViews.java","function":"put"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"file":"core/java/android/widget/RemoteViews.java","function":"initializeFrom"},"deprecated":false,"digest":{"function_hash":"195392444460684312610748256534289914126","length":1506},"id":"ASB-A-477278752-b17ae14a","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e1b25527c312b0d87b5399ca383d2864c9767738","target":{"file":"core/java/android/widget/RemoteViews.java","function":"writeToParcel"},"deprecated":false,"digest":{"function_hash":"41122785288890201017539615136421695467","length":1553},"id":"ASB-A-477278752-c261f010","signature_type":"Function"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"line_hashes":["45706068184154596497422057449441647733","34288421074090340415486195951680969266","132691677925521708371340838472490605877","243555200852200659624259429292278405497","333358594507259182192250759060926008255","210878114736162887112542143554568823942","221467165133485580168764336048077140134","229567361479404278790189888633997859641","20516799536666824827538027540931631223","50155484699627387418750727798573411133","76282984792355376613893297803527298189","272709336408604758703335565021843576855","264213374478106597857727660132350042100","44559083173691128873379324379805440281","242300008183969948410353163122085610161","339515282661521562043132492323816046229","237266434337617975795514289636725532749","115699066067050311541647086173949391569","143584837489036709155823405178256981293","97984560058532724262595445657676703425","242526010061820342322160311566146185145","175434542422466243708124550707260785761","339865971547693588623785570788478870679","313900527699403326325544100601848920973","286024874467021681862820834927886299629","6195553047344328696427185526825992272","261493878870926110525420931669064562738","249967315934760301066482730310839366593","238442766971968966115226360615716814659","336994614320424523387571373108173652781","227880333627311577505283416329347793129","17581744783568853142341703959736152328","150538842112834398349348818379342357971","189455738464114649769143228228387077707","235163891129961182492869042852154439929","76029947795697917936794798080871598815","215875776630623003184172573489343969111","290414284822152566247434792003281752799","335347991110906818201572139070451297746","281565402210058022114148440452493225869","12981769804725859054673306545637350317","183922079179050354628552989025453215172","92594108993527938633255206972914765016","56196655077245206227277564284028021761","56964377574088476945945169728139589750","232009338613712059013577061159237988253","197436784067291073009029868493028712790","259540575007233041531004875097023481224","63012543932130289792365787898964993822","206750790741387557517838188636056450962","188086739728257524809912969183793167602","102045382742518473330565054201100497545","239358173999924319972259230881982558400","76029947795697917936794798080871598815","215875776630623003184172573489343969111","275030391631674078432154307888682418105","180164045361166808129661328867593569418","257230893125742772324310425161346907365","152711981547761841261589038474289799279","278794548285098897925401663277027763961","48439270846296334156546147660454364416","112177863004473071407512124756898773746","338206753223049003291071409699735212936","30578339488614019209554299949121294730","25628926214940125135609875228554601661","278387671002061293086767281516865008226","158549972946985038737296386049095210064","256807420261269743276072203261021795808","132133941422803008232533847464702148330","191294863300380013711680002882485651085","72793375391266810690845372304712569222","231233130773162479499526657123422191375","286858243241192046855882801564584211815","329375710359012530959494951844603984294","182315721745404765336241266193692511074","229183273115671276216085191073081880987","52799390131573788041324237545680191358","213597117324513429497651210987861504947","63844737244534912443066562037819615101","155332269106774670269590980004963868050","128859526950002029293335498845429870638","109707491683028775918494740833841129478","11888626443227081776561453442905924777","102204448422216224612992401556088552755","213597117324513429497651210987861504947","80561140726120914370186725960231877825","326482160082961949250045666999254330325","251204476440236750988389203419579539389","213597117324513429497651210987861504947","319702814868016529939549649101335299012","281903089860062296326360213136786271286","190295273850538301357311090820944438436","120950969442820814535428251115518981351","233519577490182514671337485531233115862","266060618645630576413228126793523371826","188658594545926085851162582198303615910","72401437723938815105835318884176627087","243836205219074108617379289202816845363","253004811884033145152141205228801013755","35621330040335472974840618016284974870","168589000047644589744156871523568770182","160888825392906122658607403493415188395"],"threshold":0.9},"id":"ASB-A-477278752-cc09d9b5","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"file":"core/java/android/widget/RemoteViews.java","function":"get"},"deprecated":false,"digest":{"function_hash":"308015568079817184504951210535873621027","length":169},"id":"ASB-A-477278752-ce7a8406","match_only_versions":["17-next"],"signature_type":"Function"},{"digest":{"line_hashes":["128138586493073958209375628934733803030","126262913910327108907945816172295144488","224642040870067891011100118956000871350","94721734460418649025892884298377676236","249266718958006960634618769751124880255","269017638098793076088849830196790528733","69245943500149712285359040326905180648","267625275472435582753883342250653193962","18144137747627215218611574652915360738","253109625702311697047675955132271796309","334944113736809560869531426444317258108","72956102314976515276802385008512198824","21718045121734873708841829092236411791","42057112648843240902778289156372623642","72478491080702773068581065460247772726","172160432489537939501764459814330602672","179703694460839148023968449651424157476","42569618764431087143726463291897957107","171548575073215745894904883030801809356","247168392109118113812846782370913555272","312627469203136922332660682646419395281","257815580062109604625558949573997286553"],"threshold":0.9},"id":"ASB-A-477278752-d5303a09","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e1b25527c312b0d87b5399ca383d2864c9767738","target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false},{"match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"function":"ApplicationInfoCache","file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"function_hash":"169688671046148789085904675295219492024","length":71},"id":"ASB-A-477278752-eb0a65b2"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2137c24fb2d16addba712a6844a275dfd0349351","target":{"function":"RemoteViews","file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"function_hash":"323246587463465067695711613908437323784","length":779},"id":"ASB-A-477278752-f2e2b65d","match_only_versions":["17-next"]}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-09-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/65c02e08951d30cae42a4b4fbc85db92841bd259","target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"line_hashes":["128138586493073958209375628934733803030","126262913910327108907945816172295144488","224642040870067891011100118956000871350","8530221144172989364194774583188073606","250993601811819589332206039483965112839","269017638098793076088849830196790528733","69245943500149712285359040326905180648","267625275472435582753883342250653193962","18144137747627215218611574652915360738","253109625702311697047675955132271796309","334944113736809560869531426444317258108","72956102314976515276802385008512198824","21718045121734873708841829092236411791","42057112648843240902778289156372623642","72478491080702773068581065460247772726","172160432489537939501764459814330602672","179703694460839148023968449651424157476","42569618764431087143726463291897957107","191039287901504251887197527785320123829","268665900857129595276793087195381759410","151805587998765570618515633777047258887","257815580062109604625558949573997286553"],"threshold":0.9},"id":"ASB-A-477278752-22bbb64c","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/890b9f6d59596bf68d2a38bdd62ba744cec68a96","target":{"file":"core/java/android/widget/RemoteViews.java","function":"writeToParcel"},"deprecated":false,"digest":{"function_hash":"300700994597034492807733956073871668159","length":1363},"id":"ASB-A-477278752-395c4a93","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/65c02e08951d30cae42a4b4fbc85db92841bd259","target":{"file":"core/java/android/widget/RemoteViews.java","function":"ReflectionAction"},"deprecated":false,"digest":{"length":1453,"function_hash":"160037494995673571563971230811061810498"},"id":"ASB-A-477278752-7c5f3389","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/65c02e08951d30cae42a4b4fbc85db92841bd259","target":{"function":"writeToParcel","file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"function_hash":"300700994597034492807733956073871668159","length":1363},"id":"ASB-A-477278752-989f524f"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/890b9f6d59596bf68d2a38bdd62ba744cec68a96","https://android.googlesource.com/platform/frameworks/base/+/65c02e08951d30cae42a4b4fbc85db92841bd259"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"digest":{"length":1363,"function_hash":"300700994597034492807733956073871668159"},"id":"ASB-A-477278752-0575806f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/129adfab49a4db739245796fd731d6cda4e33d69","target":{"file":"core/java/android/widget/RemoteViews.java","function":"writeToParcel"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/129adfab49a4db739245796fd731d6cda4e33d69","target":{"file":"core/java/android/widget/RemoteViews.java","function":"ReflectionAction"},"deprecated":false,"digest":{"length":1453,"function_hash":"160037494995673571563971230811061810498"},"id":"ASB-A-477278752-3b93563d"},{"target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"line_hashes":["128138586493073958209375628934733803030","126262913910327108907945816172295144488","224642040870067891011100118956000871350","8530221144172989364194774583188073606","250993601811819589332206039483965112839","269017638098793076088849830196790528733","69245943500149712285359040326905180648","267625275472435582753883342250653193962","18144137747627215218611574652915360738","253109625702311697047675955132271796309","334944113736809560869531426444317258108","72956102314976515276802385008512198824","21718045121734873708841829092236411791","42057112648843240902778289156372623642","72478491080702773068581065460247772726","172160432489537939501764459814330602672","179703694460839148023968449651424157476","42569618764431087143726463291897957107","191039287901504251887197527785320123829","268665900857129595276793087195381759410","151805587998765570618515633777047258887","257815580062109604625558949573997286553"],"threshold":0.9},"id":"ASB-A-477278752-bbb99290","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/129adfab49a4db739245796fd731d6cda4e33d69"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/40147347c435a976eccdf6f615a321bdc9a9db1d","target":{"function":"writeToParcel","file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"function_hash":"300700994597034492807733956073871668159","length":1363},"id":"ASB-A-477278752-e627db78"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/40147347c435a976eccdf6f615a321bdc9a9db1d","https://android.googlesource.com/platform/frameworks/base/+/129adfab49a4db739245796fd731d6cda4e33d69"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/97fc79625669cf9812f561894bd1cfbe4fede37b","https://android.googlesource.com/platform/frameworks/base/+/232a890e165e122a08640171191443df80c0adcd"],"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"id":"ASB-A-477278752-16a49af4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/97fc79625669cf9812f561894bd1cfbe4fede37b","target":{"function":"writeToParcel","file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"function_hash":"300700994597034492807733956073871668159","length":1363}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/232a890e165e122a08640171191443df80c0adcd","target":{"file":"core/java/android/widget/RemoteViews.java","function":"ReflectionAction"},"deprecated":false,"digest":{"function_hash":"151855120793481359579798430456286318125","length":1781},"id":"ASB-A-477278752-d148eaf3"},{"digest":{"function_hash":"300700994597034492807733956073871668159","length":1363},"id":"ASB-A-477278752-d42f56e3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/232a890e165e122a08640171191443df80c0adcd","target":{"file":"core/java/android/widget/RemoteViews.java","function":"writeToParcel"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/232a890e165e122a08640171191443df80c0adcd","target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["128138586493073958209375628934733803030","126262913910327108907945816172295144488","224642040870067891011100118956000871350","94721734460418649025892884298377676236","250993601811819589332206039483965112839","269017638098793076088849830196790528733","69245943500149712285359040326905180648","267625275472435582753883342250653193962","18144137747627215218611574652915360738","253109625702311697047675955132271796309","334944113736809560869531426444317258108","72956102314976515276802385008512198824","21718045121734873708841829092236411791","42057112648843240902778289156372623642","72478491080702773068581065460247772726","172160432489537939501764459814330602672","179703694460839148023968449651424157476","42569618764431087143726463291897957107","191039287901504251887197527785320123829","268665900857129595276793087195381759410","151805587998765570618515633777047258887","257815580062109604625558949573997286553"]},"id":"ASB-A-477278752-d74b7ed8","signature_type":"Line"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"129039350590260289882958091473674898445","length":1403},"id":"ASB-A-477278752-440bdf2c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e2334114e44621d41f9146650bf43f0f958dc73b","target":{"file":"core/java/android/widget/RemoteViews.java","function":"writeToParcel"}},{"digest":{"function_hash":"129039350590260289882958091473674898445","length":1403},"id":"ASB-A-477278752-a1793562","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/541207a855445c51731b0b3d4f2cd1f353718e29","target":{"function":"writeToParcel","file":"core/java/android/widget/RemoteViews.java"},"deprecated":false},{"id":"ASB-A-477278752-a93be364","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/541207a855445c51731b0b3d4f2cd1f353718e29","target":{"file":"core/java/android/widget/RemoteViews.java","function":"ReflectionAction"},"deprecated":false,"digest":{"function_hash":"145671044534187952202694961112066660869","length":1909}},{"digest":{"threshold":0.9,"line_hashes":["128138586493073958209375628934733803030","126262913910327108907945816172295144488","224642040870067891011100118956000871350","94721734460418649025892884298377676236","250993601811819589332206039483965112839","269017638098793076088849830196790528733","69245943500149712285359040326905180648","267625275472435582753883342250653193962","18144137747627215218611574652915360738","253109625702311697047675955132271796309","334944113736809560869531426444317258108","72956102314976515276802385008512198824","21718045121734873708841829092236411791","42057112648843240902778289156372623642","72478491080702773068581065460247772726","172160432489537939501764459814330602672","179703694460839148023968449651424157476","42569618764431087143726463291897957107","171548575073215745894904883030801809356","247168392109118113812846782370913555272","312627469203136922332660682646419395281","257815580062109604625558949573997286553"]},"id":"ASB-A-477278752-dffea4cf","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/541207a855445c51731b0b3d4f2cd1f353718e29","target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e2334114e44621d41f9146650bf43f0f958dc73b","https://android.googlesource.com/platform/frameworks/base/+/541207a855445c51731b0b3d4f2cd1f353718e29"],"severity":"High","spl":"2026-09-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-09-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"digest":{"length":1126,"function_hash":"93955558209114313342486193879673654825"},"id":"ASB-A-477278752-3ee204f0","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/39aebc2b4d0db908d69d0b29db8c1de128ce4024","target":{"file":"core/java/android/widget/RemoteViews.java","function":"writeToParcel"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"110424317728633629565652377787236476145","length":1434},"id":"ASB-A-477278752-560e2ebf","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/39aebc2b4d0db908d69d0b29db8c1de128ce4024","target":{"function":"ReflectionAction","file":"core/java/android/widget/RemoteViews.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/2c753818dfa18fd847de6ad26d800428af278ea4","target":{"file":"core/java/android/widget/RemoteViews.java","function":"writeToParcel"},"deprecated":false,"digest":{"length":1126,"function_hash":"93955558209114313342486193879673654825"},"id":"ASB-A-477278752-5b13ceab"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/39aebc2b4d0db908d69d0b29db8c1de128ce4024","target":{"file":"core/java/android/widget/RemoteViews.java"},"deprecated":false,"digest":{"line_hashes":["128138586493073958209375628934733803030","126262913910327108907945816172295144488","224642040870067891011100118956000871350","94721734460418649025892884298377676236","296161585610253572246860138523111644933","158464457046680647782034229608928793109","257895402680487192173951587995035736995","52762253531256118014137928933658002302","242323302671254103627412044965862746046","222964114232531009539848300168084439773","143324830497973991353926923118850890297","110078544195058360376782453073086792957","21718045121734873708841829092236411791","97347667912144166006291858894011316411","169003295000946315034024455279781068759","244542897262979696324335739203538280874","153020967136070374944688560251840237892","42569618764431087143726463291897957107","256380228068856430227416808587175489432","20621123783485292462207528266559778238","195074496352544740381425056045422489435","257815580062109604625558949573997286553"],"threshold":0.9},"id":"ASB-A-477278752-66c8440e","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2c753818dfa18fd847de6ad26d800428af278ea4","https://android.googlesource.com/platform/frameworks/base/+/39aebc2b4d0db908d69d0b29db8c1de128ce4024"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-477278752.json"}}],"schema_version":"1.9.0"}