{"id":"ASB-A-480975165","details":"In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-480975165","CVE-2026-28596"],"modified":"2026-09-09T15:15:54.249544283Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"target":{"file":"services/core/java/com/android/server/app/GameManagerService.java"},"deprecated":false,"digest":{"line_hashes":["20982447598958631382731828939379110873","100646987225916062867589442827492674535","299840733928824278291399390362936302801","168531452746523633564007518218141505047"],"threshold":0.9},"id":"ASB-A-480975165-2b3cdc80","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d3a1cc8820b17b04723df14b9e5df02473f440d6"},{"target":{"function":"parseInterventionFromXml","file":"services/core/java/com/android/server/app/GameManagerService.java"},"deprecated":false,"digest":{"length":1636,"function_hash":"98306407619870254031970706705374646960"},"id":"ASB-A-480975165-2f658f72","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d3a1cc8820b17b04723df14b9e5df02473f440d6"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d3a1cc8820b17b04723df14b9e5df02473f440d6"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-480975165.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-09-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/81c0a9160662f5f03a3a81236611449b6b038c90"],"severity":"High","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/81c0a9160662f5f03a3a81236611449b6b038c90","target":{"file":"services/core/java/com/android/server/app/GameManagerService.java","function":"parseInterventionFromXml"},"deprecated":false,"digest":{"function_hash":"98306407619870254031970706705374646960","length":1636},"id":"ASB-A-480975165-a36a5b12"},{"target":{"file":"services/core/java/com/android/server/app/GameManagerService.java"},"deprecated":false,"digest":{"line_hashes":["20982447598958631382731828939379110873","100646987225916062867589442827492674535","299840733928824278291399390362936302801","168531452746523633564007518218141505047"],"threshold":0.9},"id":"ASB-A-480975165-f949e285","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/81c0a9160662f5f03a3a81236611449b6b038c90"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-480975165.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/49a60b644920cdf7b513b8fffe3904f1b154f916","target":{"file":"services/core/java/com/android/server/app/GameManagerService.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["20982447598958631382731828939379110873","100646987225916062867589442827492674535","299840733928824278291399390362936302801","168531452746523633564007518218141505047"]},"id":"ASB-A-480975165-17b1c27f","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/49a60b644920cdf7b513b8fffe3904f1b154f916","target":{"file":"services/core/java/com/android/server/app/GameManagerService.java","function":"parseInterventionFromXml"},"deprecated":false,"digest":{"function_hash":"98306407619870254031970706705374646960","length":1636},"id":"ASB-A-480975165-ecf2dc0c","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/49a60b644920cdf7b513b8fffe3904f1b154f916"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-480975165.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"id":"ASB-A-480975165-9d1ac5ce","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7531bc2726579c3180447af102d1e4217bdcc41b","target":{"file":"services/core/java/com/android/server/app/GameManagerService.java","function":"parseInterventionFromXml"},"deprecated":false,"digest":{"function_hash":"98306407619870254031970706705374646960","length":1636}},{"digest":{"line_hashes":["20982447598958631382731828939379110873","100646987225916062867589442827492674535","299840733928824278291399390362936302801","168531452746523633564007518218141505047"],"threshold":0.9},"id":"ASB-A-480975165-ca6670ba","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7531bc2726579c3180447af102d1e4217bdcc41b","target":{"file":"services/core/java/com/android/server/app/GameManagerService.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7531bc2726579c3180447af102d1e4217bdcc41b"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-480975165.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-09-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"id":"ASB-A-480975165-10d1b8b2","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/98f4d6d74c24280ff10125ad4ca34dd118f7f697","target":{"file":"services/core/java/com/android/server/app/GameManagerService.java"},"deprecated":false,"digest":{"line_hashes":["20982447598958631382731828939379110873","100646987225916062867589442827492674535","299840733928824278291399390362936302801","168531452746523633564007518218141505047"],"threshold":0.9}},{"digest":{"function_hash":"98306407619870254031970706705374646960","length":1636},"id":"ASB-A-480975165-7289e9bc","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/98f4d6d74c24280ff10125ad4ca34dd118f7f697","target":{"function":"parseInterventionFromXml","file":"services/core/java/com/android/server/app/GameManagerService.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/98f4d6d74c24280ff10125ad4ca34dd118f7f697"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-480975165.json"}}],"schema_version":"1.9.0"}