{"id":"ASB-A-489081076","aliases":["4409568","A-489081076","CVE-2026-24088"],"modified":"2026-09-14T15:55:59.123504793Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"},{"type":"FIX","url":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/-/commit/f08125d8276c21d93a997bd031938454f71ab7b5"}],"affected":[{"package":{"name":"abl/tianocore/edk2","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2026-09-05"}]}],"versions":["SoCVersion"],"ecosystem_specific":{"types":["Unknown"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/GblAvbProtocol.c","function":"MinimalBootReadPersistentValue"},"deprecated":false,"digest":{"length":201,"function_hash":"6024417031152199482886280038118210642"},"id":"ASB-A-489081076-000d3e95"},{"signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/GblAvbProtocol.c","function":"MinimalBootAvbWriteRollbackIndex"},"deprecated":false,"digest":{"function_hash":"257092500352273290400290769803912896326","length":375},"id":"ASB-A-489081076-01f3d9c7","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["299284457896921354249119966608827348464","183260955645171925562882840709876127602","263268903436659901463492371619317004781","7530861551272477348244004729512061489","116787649837822053206817159560077495407","330960188509779887358500868791764428680","179895366565795559090112923413587965045","161798309802766503177309325058582121592","217626928600760827915248429722553506425","42446961208318351052776990255742207233","273457631821679083994244082147159572347","214485224601649771579385050780652682905","19951903825781944180415231288153818056","241678117418170604347014292597935915247","101836748766154979088337048218953521284","69740288855972102119004709550282858951","283632880198489420651325590714875224006"]},"id":"ASB-A-489081076-03cff6ae","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/BootLib/LocateDeviceTree.c"},"deprecated":false},{"target":{"file":"QcomModulePkg/Include/Library/GblAvbProtocol.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["287642978557071976637768562448510836674"]},"id":"ASB-A-489081076-1532fbea","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5"},{"digest":{"function_hash":"49647126302671562078461093383366134759","length":413},"id":"ASB-A-489081076-1cd130eb","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/GblOsConfigurationProtocol.c","function":"InstallGblOsConfigurationProtocol"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/avb/VerifiedBoot.c","function":"ParseFooterSecPatch"},"deprecated":false,"digest":{"function_hash":"148285359343664808537769497920993020801","length":576},"id":"ASB-A-489081076-21d446b8"},{"target":{"file":"QcomModulePkg/Include/Library/UpdateCmdLine.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["311048193240988253346610799781674092227","250896713220331024474874383810473369840","132254721453770580181095947786613353932","181698003723579810812076093515064260395","2050735696185978930006539322053671149","27180767487643086112084468258863408499","75533429136086101869190337904950125400","115716192976016418783402376881577470881","120017246068083732960982910127097845596","290547147261331690385651748610099177139"]},"id":"ASB-A-489081076-253e1fe4","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5"},{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"function":"MinimalBootAvbHandleVerificationResult","file":"QcomModulePkg/Library/gbl/GblAvbProtocol.c"},"deprecated":false,"digest":{"length":1694,"function_hash":"13000393401230336305115374040044474499"},"id":"ASB-A-489081076-26364eb3","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/avb/VerifiedBoot.c","function":"ParseFooterOsVersion"},"deprecated":false,"digest":{"function_hash":"77149814139854826181197050597045904616","length":472},"id":"ASB-A-489081076-2bf482a7"},{"digest":{"length":467,"function_hash":"148073116287068768838680425197846272238"},"id":"ASB-A-489081076-377d08a4","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/GblOsConfigurationProtocol.c","function":"EfiGblFixupKernelCommandlineMinimalBoot"},"deprecated":false},{"id":"ASB-A-489081076-37bf8a32","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/GblOsConfigurationProtocol.c","function":"EfiGblSelectDeviceTreesMinimalBoot"},"deprecated":false,"digest":{"length":2044,"function_hash":"174982951240573840851303005035760393603"}},{"id":"ASB-A-489081076-4bfcd4a0","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/GblOsConfigurationProtocol.c","function":"GetDisplayCmdline"},"deprecated":false,"digest":{"length":289,"function_hash":"211783918210830283054493441256518647403"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["11743019522502051383026506764546623452","261139525160430171148857618424185745167","85684560935216031791340500301147944786","105106904976869116080841958263818702453","138273386970226900359147436810027313169","95462358713250111393696868049782472424","275323575545271700177158445436230559653","306190694213943307242381659533112103413","30138597569325121852797213105284799466","59606899898135606290912782374079868568","334542123347578014036676040215552937457","284592145459328676176743360473882137366","302201473276015590627209907857748334685","41450388316423641109471235909500346102","71635387059162233744608868091496181489","278560494203066828448269240417520519602","203248316707371756204699643350766666639","131342622903066959862844990638428993708","303935506149727521617291951667795468092","206228798464716076306319523122393490487","16474245833863536898150818876502636383","18992953663889141065110816328107761","210835336845743035524429278434235312971","285363536782806923698720528795423647487","311920882131010230812770990607323099378","198097284920376153721429540891126538744","13755094413361714678719682772931153928","53422704543336403509011578166419983699","236101080761342757841491385402728208902","240842816293216208477274407842033480445","266082264122710640354002517647050246335","67615946438490246426760996325513523799","101159715298809430753405262731454694616","295699098774966808711183294425187390157","209693770586558723225431624303950786380","66039363782161774882004150817307484901","174602307310196585831786145502702791266","285887836115876462533492571123062632410","71915076893479899265916540360001782372","36196435044439848968702320181342189057","303070702258037114676543114326856046926","8435649718575423282684413941566106015","288021693296285209518172952855917057509","318311912839394098061200610175530271677","61928764631121256209540453054215841030","35799248230120145904263020195612576714","308777864961772158362759027480246272308","65542415655084242992678642216570910393","14067832367354476019948657641345488060","215332628671718484238653332278577459949","337747001559992595025097511580905703965","128455286136994553612959476174448370211","312415990557495596793166327868354010522","156692704080746794609332988459828756274","148386733256675409957643992593353848550","37236852403658020819926339479054009332","54971578474229981163764980544549293984","306651005567181876344722963843184858991","302250781524553057323243567732209997313","200542409268583387252843498666059150441","47264646281231659386869640342702504551","317815969241105629265923101629062582643","334726568603973342061198066145329684118","322418284134506675502483800632029828194","70825597355512063921489466020517627831","102923373945717635713256498004302839308"]},"id":"ASB-A-489081076-507c5237","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Include/Protocol/EFIGblAvbProtocol.h"}},{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/GblAvbProtocol.c","function":"MinimalBootAvbValidateVbmetaPublicKey"},"deprecated":false,"digest":{"function_hash":"28015687876876539535624387470182611966","length":1393},"id":"ASB-A-489081076-570d969e","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-489081076-584e6aa5","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Application/LinuxLoader/LinuxLoader.c","function":"LinuxLoaderEntry"},"deprecated":false,"digest":{"function_hash":"182689090969082442574331604176975010445","length":7043}},{"target":{"file":"QcomModulePkg/Library/gbl/DtFixupProtocol.c","function":"UpdateRamPartitionsDeviceTree"},"deprecated":false,"digest":{"length":1190,"function_hash":"185279686457019621841300649781271412472"},"id":"ASB-A-489081076-5abc640c","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5"},{"digest":{"function_hash":"106983808361504202087137723263836073991","length":376},"id":"ASB-A-489081076-5aea0e8f","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/GblAvbProtocol.c","function":"MinimalBootAvbReadRollbackIndex"},"deprecated":false},{"target":{"file":"QcomModulePkg/Library/gbl/DtFixupProtocol.c","function":"ApplyHypOverlays"},"deprecated":false,"digest":{"length":1101,"function_hash":"240200322879355017541890868963653552676"},"id":"ASB-A-489081076-5f6cb4a8","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5"},{"id":"ASB-A-489081076-712013ef","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Include/Library/GblOsConfigurationProtocol.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["69823073492290727230737221526775093001"]}},{"deprecated":false,"digest":{"line_hashes":["220590034269273024965232603588165173288","229016049934178061586014682515249202475","86671816662349478887774153344261802753","117443062515404677618614659952377203686","329049631498565729188504704537688831270","315817084305260279179540134253471064963","33504261221519564758892178362650166854","302911689645606664361463676053045557178","28282456480357723852620939002894784713","16301127424498398177250677521089248335","125562539985597204109677734652945746783","319749041076993423020873898477181869566","43896668059373863994218316109169495979"],"threshold":0.9},"id":"ASB-A-489081076-78faea52","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Include/Library/VerifiedBoot.h"}},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/DtFixupProtocol.c","function":"InitHypOverlays"},"deprecated":false,"digest":{"function_hash":"224523404524790058600507558295840223854","length":578},"id":"ASB-A-489081076-7a1a71b1"},{"signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Include/Protocol/EFIDtFixup.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["308803969050829939305498845926745531707","109292785113536960848494686507722626192","3127793084916581364714141355748039554","285402889357954373891422860213476049176","287410607309074266522257660664553152241","173952588656814344440997776583007055082","307481461730363695814466418872593140519","29154757020705584667943882728233188647","144526276521285102936532388531825129762","55622751578502151599136439494880960602","262141190481626168839504231259981928100","256997575038319536436248640060107687022","310548588014622310452059070782091598530","339693423320685131884968692922154446024","250304932857728261181773675340208162384","162245091441801613550755442771460456447","317893073565743665419773870477087355347"]},"id":"ASB-A-489081076-9d370394"},{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"function":"InstallGblAvbProtocol","file":"QcomModulePkg/Library/gbl/GblAvbProtocol.c"},"deprecated":false,"digest":{"function_hash":"110237730522906772707900125780672218228","length":386},"id":"ASB-A-489081076-9fdba328","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["114880686914849306421023373938760444850","121590437805558182357311562727901046531","146896545548722984058142185760883755716","208682452675955676097198683961196068831","87082715203620226990973232890065765573","269452197829521847978862910656218762742","287714273492906663704440987751469206584","35485805862898005297190034382591372612","262706798310098731025113572596587170474","114706319547132542455907075416999334797","279035530038036386425607165420537364074","305484268258064418777309211990038768722"],"threshold":0.9},"id":"ASB-A-489081076-b01da71e","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/avb/VerifiedBoot.c"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/GblAvbProtocol.c","function":"MinimalBootWritePersistentValue"},"deprecated":false,"digest":{"length":200,"function_hash":"83106320632324331104685819330402780055"},"id":"ASB-A-489081076-bb24cd51"},{"deprecated":false,"digest":{"length":1262,"function_hash":"52811200152926665126603147327686665017"},"id":"ASB-A-489081076-bc9caa8e","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/DtFixupProtocol.c","function":"MinimalBootFixup"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["97647665808890470180824503145178829200"]},"id":"ASB-A-489081076-bf071153","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Include/Library/DtFixupProtocol.h"}},{"target":{"file":"QcomModulePkg/Library/gbl/GblAvbProtocol.c"},"deprecated":false,"digest":{"line_hashes":["226640728284731460732935598392861095159","249876243600759554795676789339262107555","202025529004752762349342618447737780438","117657014227183382166134071003893034762","324558563212987489354015734473096383774","236011072233384943572558129007072652315","4411720096368762463329137500956064207","114052414913417379261231266368680840310","68037146550066391460758796953717314581","252918620381835695766600122104017455534","196611626797778453119442102275334546355","10025965593566802594188549233985717619","288861491747208377575836106587953753668","16751154552892851790318128824042613630","322555478398803709002841683077605449516","84226956617477208178945852730343465349","92728474982360300529903268042866106486","24286446910566562416202755037138669413","55828305225089246582439164874429510203","151589174629931726781660836986300508926","250094159681497687749464829397188083643","240842816293216208477274407842033480445","41686121666023903410757923609551447752","307222857437312414827713921083680852898","19698183443485650181906662553642068927","47670517202288693305328234049317564281","107667061890982692213930701149493277596","301381800290765062859232982537472762008","95938065401364654417812549078918997070","49486100938408567894192156698046321350","309290605001583298110303977577163627805","291164940023985367367595143467912981227","25573520205088515120205053748222424309","27168104916327179762391129466748132334","63938206295507098051545092180711896996","147885661262942642931328376784170531047","14139547574120356447629759868674641698","27555256621724089401900387129803603341","298252023970722252509255446558887235116","333107405336423400125666712490329355240","168113328892640781797536794246739888946","325211808883156650570762924562895816645","321700626821566719096929543216239210117","7302637780815574496681510998252511158","141886270044531376587605333035877060002","196127178641301326469889994564349777952","144181666772167404901929615313329825158","297852417490966910213002884386155706776","165277507906241467430735029307633520813","69359698036599165363334302127343629600","258339792530297595468843261518794809647","224714548206347508001762308315100156850","29694365392422108183146032698112259111","194322275848302808888352186460574549900","152735383399054133295114897807771802054","71461275751745242814476249732807757532","119669427694573332380950889381925717658","229433300106363602393450575543848855295","54385158288512536027952558504020283571","49097219187839658341992386508710005480","172754565827801842769426922246095333773","8074594207816603790397048714130854601","24436571609283612877816250721322469444","255770590957951822225567633571141745824","168101914492357624398190926436667437034","314969881643250385817689060017177107695","104362233469068055871698089347104709444","46812191234912885585052290535232503462","298251464727237577242263011551755596844","310090075406474253090340523866340350469","168885812319997597825148508977764365234","204897865014318335897644418761047800444","194413611318464999939606910928675993976","162456599926042066063467806484815150226","321721692291870203583194270629017492359","220028917151567809109167214726800632020","179523202629049354088799521473999215643","10457577194024821340518941188138742525","193356590666724142496632191547026452595","165417167131227070151894971353192622768","117300078404470249605284957126807798899","298329953997663109537817099997237271019","301098461608177288855929770738779830126","18963778694318776311383485154072749255","217853283198570499111922591776043390210","50455911602470638785046771665787462263","276780521164011186125511264118070705260","255770590957951822225567633571141745824","327646029013183000815066438579019161829","151180561366402385295868073243587936716","103841713448787207182898613990491438096","269258191942191629863489538982070668192","292161935810661685714040835080922369441","112622600039738533769605353211960506181","64340959296593014541841729168457571543","329705861641155671019616660654112096420","175398912573252880807083843215160155274","752764588547725935931640566893282548","128316106826345044383993052252135525936","160636568956255961826076150042270064945","271069873110945630040892310349465609492","276780521164011186125511264118070705260","255770590957951822225567633571141745824","127606462345282445558151544106570403985","53069891784814364577280317753736077825","310980521277218844627009562107645839794","301943996133148061186548396888030043156","104209598182769557938425920250133227811","175963092534391647990443327196907304429","323276598964622723276175387303106795788","298076731503625928806599892307142965659","304124420373783867684293860475602018333","249512475862472698931992155461837902845","268975508234818305400613410758834505243","199938039478690307457657558911497643342","257577968717566642256115744064334368030","303844744989856401691077764066029169473","294075060282650660055505224565487398697","316302996537998634894112398926260255849","14620773971431659737332883437708555585","237873232885672631164167320353902179294","24084696622792497686736585054570398761","194589519021586161052673961840718785063","299172921967579160101844204272189501004","292629398520687753663721272592451219061","152729385192138973708448249401700088979","336104171578835839695967220933138448405","155890878792362140333987811145938578019","313210957456601513929530038306581922326","48054677423982708639961870086217288817","163933178000619456951569345036574058749","124123616702117642500853684840092898740","197231661690624692610170735543367582501","8202642793375387216371388907582547035","253706952760706187541421574248180274579","176313373108284993933183535891276064740","204196783488313945678955855866595928","199340820698373418080783477260821220817","116959814282351026114977774363230989326","174518865829516553104866039332822812677","92694689503031248284914622763059750731","72443171186559191969002843108363807218","312567789970823902833056997528942212649","85156863332398509108526930268791946025","91074185055996816934004307262089492345","312726155815776805491656928731057995843","128191286629460661875277132219150040255","3547261547000079902459707913105673393","247759951522404681557388087707235773136","33342984943666924861567463293822417099","312680584658958732634742929746007775390","209145604246590005168655723589455616114","76856595104178079758084707481941162740","316441193902592612024255844550397428437","100122826064525233793779735290709295609","310590748602705741947492844237659166616","294211992812417261145767695678656763648","82947323446289457269768459928300401832","129464345087037164395584002996534630132","316416582469169215517832483258009995974","37129738890355468951497302878399302548","3205063757775256492703429051414431398","145863806089353287673139640721571258153","228089100617483415422715561546993856652","220707708129845871377019629910442574960","28125967288859524658399224374534711377","37762932844985423883870396415263788631","111634864976462258412914273117437478196","175621301991801685439853041493169789322","41363775170485218720698269824018983485","39358704772576844223893429826679374987","50087887369873440442941636830499631708","100931659443813523827355849149995020351","140301589476348896035619287114460029469","227655521314971136754492537755657425646","216206010590461044034471102912736691428","84036555531036273663056977173802351221","128805077508505223241467554133689531273","70039892865872504951340266350148284790","31562916906359239467573628664514173074","114553479887504693900625168374296899076","246525850249945881333385500535483413215","269611622012201287335592835060130926613","175399818275614274020458511757407006784","202433175059977749619521887322079422875","18748356114776371552042154772445627940","93993501127364486419302295144613944420","245106282160862393315545929601283159460","60248164408207904385956434770047794608","172423235366596085515703573620998617646","166662002289656724892347276299084862797","192425340652085640177809503984212343032","7430839914350922696086202703090178322","221398591735712390239532587268757194485","67604690813830147329532428652555565656","44688263559152449069894746095953045075","136588467612975786588809483740977062121","328485363111877304819553958558085246543","156187488617617427915852984439125692774","26475869201659591879973872259735005069","67514555245966868669633540546210560090","275458142919861329498328994310390282073","201521468690657993521203436213178714385","218381872597080458348351508653669801767","28895958161142002445435660334640677072","292231306633738369080714290861425830542","102363750609529461625133616216661383428"],"threshold":0.9},"id":"ASB-A-489081076-c0ce1610","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5"},{"deprecated":false,"digest":{"line_hashes":["34727308882185942481402236610531204042","32443606593680340846168134275238761639","293321494209378338069474876511793736850","4480740477402516251516798367908993273","281606954923182861311303157953500494651","286276471565899535708374207394502214623","326743211454118885347310410686830103542","284664855359016931264989501512008752370","285910547789933847635729066029205528374","267671401583528980271621758534437300939","140286379617404307163950323101913770221","333656442746420566880906851285040263530","221440057243240847117247570594361072309","313621971440279667827707805953856460153","178854908393378183086311959699149004654"],"threshold":0.9},"id":"ASB-A-489081076-c1e6f5a3","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Include/Library/LocateDeviceTree.h"}},{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"function":"InstallDtFixupProtocol","file":"QcomModulePkg/Library/gbl/DtFixupProtocol.c"},"deprecated":false,"digest":{"length":387,"function_hash":"12611474206473075934016386046478541153"},"id":"ASB-A-489081076-ca2ae259","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-489081076-db1dbca1","signature_type":"Function","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"function":"MinimalBootAvbReadIsDeviceUnlocked","file":"QcomModulePkg/Library/gbl/GblAvbProtocol.c"},"deprecated":false,"digest":{"function_hash":"9020018999561175326588430095596125577","length":198}},{"signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Application/LinuxLoader/LinuxLoader.c"},"deprecated":false,"digest":{"line_hashes":["164286781610542465933732203122118896659","174904481453846708501422207580776586254","188245908819343500763068149333557872885","309187618597514892363069459793146175620","132972479877991098656307484469097850825","219294635584147273290445630228908442329","317093341359368797173371525115512815635","223501555612673028994400210990872408564","49027857504048160929050906885301373340","166969444128817299790770921256978285646","166071721965999097780037107276714280263","201175619819501715293059129729327713731","292359967621978046998616992819351601725","77108570285729244100143129313311320116","166002238920388988074619062671593978576","219577493669152604269408006493845664383","267528618791343616561606127704961546706","259841458839002210409972953010920364029","234612996280993458769138151284570673991","129839487939237706710436908888244657237","73180952280992338995474523442056726509","284009487042920488678766142548109093379","4672379698020921752315529702146980906","146880817884805776900736271127849763775","35650584975394430466611884100779788395","317483232626280588101448019387225577628","130475915805403816652068304691930516133","183422604536263893878290401767518139588","113489091273461540889094782308975222759","220469944622451193868315276445628934132","58669012077483211756986048487051147111","262449438856478386281948661510228558256","339336314178045508359662486522902151035","202143284893174161980797175564762816080","338810529333804218555699634642740279263","12223325452645366359163389024796845954","88226101360167173627381389572911556339","240656277377827452705355943691768001863","111495886254875102428642550665370699460","45912396092591779964866551225586514381","275255170545951841238504966768457164130","247159813672859321700211614605645910241","317818563702847091019622422866360427976","247986278181453315865993948463610260851","43356623529671560331163956462666896401","303614677827532057188680810245857896057","308846772515748271206429383369661966598","93521818661356375603516200004574362548","95206260277025047001829873235387094342","245918177460532474726000408349940811433","96310470882214616317254489163386671948","91240185193276464442114268230083843524","62278537414852542480569105776353101042","36553071547421847451243579768263487705","226394478818041852819424734037823650113","170988103277912799873497028364268254040","172098569189152893296296103886284178896","246313125930322535067461181634349978254","287504400477720167576751760028643560049","227348059180677539132449102415667321105","114851994005939230939804705033364013521","338559130605536504564051603122688578893","152398501516881946448259696104503731278","63366857345809574290105943198203445828","254884161330313923900050839716671558582","109823648868905639148906099470588856635","20044678965459360093510071940487017163","12664880952847362204851258042440750414","336984183949277112382671984842589566163","68983446853961242760366197818663475649","217464490922528320116137080263665671983","228854702060307287273738712247747565300","77684308257420060600504379151862747153","144086562432418316129862282530398947751","12340262136995727764524219716253415336","77766040556231590599182778210964431524","195786280290692552855759477248490663600","288717433019636412289027136876752377029","316690888526128813535464580721984779947","266220708070115069397852425490558282783"],"threshold":0.9},"id":"ASB-A-489081076-dc0f1f5a"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["243923484794696012554872624273515841622","122219721913535000990301683143367012663","74357204648828627825359760736588960921","97318821604055868790181539719094780026","309492122845104891227602588445187867755","177870988144835930828961572894003009084","91801054918022296152409264475850233919","253545267786753950193380466612968875667","324862272192196644513898331146206525076","81067356329320697055304397946640152337","242907845703175087115499214913295354896","239078979761684898831050238408894632936","120973687928644832317910247742136588357","306481571727575784443186657997503002399","88882614893696806160772557498199693150","251404023815967055561265248660649164833","175089735037349400824195678310878387150","206456729632656029173937483506589633637","169616013974379677827065267338000126577","33995882523274136847759125366027924333","119739341045821228910331639616888616008","138798881533429315290269467754109090417","64207655563254561822310159410029119863","149317270526112154587007429359457650094","310068312619977193269586100089346446952","236424311109606553564894117889687712735","180795044414520543436854364290546474424","12838186024648224931206713468780099693","296100220142172108905578466378100778789","153351146920220906977178038826091745222","38693815170811551107958459774054657263","243527639564662363499024748902674732827","179433340779636162361539604588122217352","6001064286661886249422438914217050834","96364163993088444253308448616052888502","171307856045459974658293390267501187760","212243526661914811276249070118280427520","213433153728876280582126669083950632700","124781283137162035421073193467576675293","226106151013056214937589095667132550769","191470983836195248394799929729450482673","193599577187551059531902352493384695123","315852398936712475498840931539399390116","160175269240626884068145808415891364462","171307856045459974658293390267501187760","212243526661914811276249070118280427520","18884423034226455329331222193566426618","178936899191150676270426422973804254383","231684595398099628315017165804087244476","236941481774898170207108131427243469109","300772345964157520817283772124981167552","274561024100542171049693649127539316375","266973940239460330737080105549605511823","142359924105121653128307059472041957826","93227829705319307766023311431661245729","142128574882512227471705511612586507373","144173649057164989520735295789736579915","237955324321469014623904785779885776822"]},"id":"ASB-A-489081076-e087ef2b","signature_type":"Line","signature_version":"v1","source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Include/Protocol/EFIGblOsConfigurationProtocol.h"}},{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"function":"EfiGblFixupBootconfigMinimalBoot","file":"QcomModulePkg/Library/gbl/GblOsConfigurationProtocol.c"},"deprecated":false,"digest":{"function_hash":"131395679825805942567980080891822588778","length":2040},"id":"ASB-A-489081076-e1fc9f52","signature_type":"Function","signature_version":"v1"},{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/DtFixupProtocol.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["276515084847033408684371608359534113761","260464997201860601541696526333396739386","160741830588963845568076122671913434424","265418244416134865250883295235250837824","152791274329612578810244781291991530470","125204334746167171812666360366209940652","53939832084573073052066895126013582122","223760088134247665183533469192422749963","77563357083514008008010213101788244407","164146450590091967028610017706680640307","32656358401318007857627758765834966032","272397510288683478114935455455334570764","181310152534920353843610476548863281969","334678323506910640242345003077669421892","248803159810519238620308337382162052386","321256448827293336783807836046390228985","264426287729030258750226074863801784681","26857240890752447592009737591163415329","321438663286048328943994516402534406223","104459703653961884044346714234157000110","29339998100184166288501708132678733772","116460736444252406751846289151135695128","209509949899929273218320686550898597903","92875270937007515768470874362173415245","331037835843586225126465529665946431822","100524133332457189164956333897139100271","171147720600388345027013970261717088121","56539335691370397039988173680602065653","240356171829523841030554475318942414176","269400336387707407787323697905119838569","35578247962145301590405765966207154351","334350526518562955539065928595253225529","78419881049405833240620384638874357684","203222021736901622385268444917568797311","318605706780251382980448276772141070447","67257552954392215926686790825670979055","200056373389948115132467765952368814275","77566723207966193187639230269405034971","23493469457524146417216735857537644578","114029357310528598725985679507517573653","327490952749881296620775348021171162687","319330404586052699669956023163305100125","325106372596078395268242634906006150200","151448606405579459769472810420796396223","265273975272731965831906902369020216289","287279809848346904645094359503411898591","186355534622941815947835644143414005212","148030334868594838268914908506789610190","34542227031974105698637779231135140583","143166063229665315427643922927625388380","312425052548445759658971865829003366217","226873636180217179884868665282559471568","140278307351629412488447713274763207984","239306846378435784205330752167907016556","337943800284471722846822294804160704389","188527789240151143805457530407131181085","103007048128636247146133014942263134654","79717014510875192887555381480456878275","311128866962694104905135161823649941","60558282400640392014859306191486957979","248364582037765942228233950721052633550","221110775529704679521460279107977715123","249849100611595785237343372920530387566","194932937913506481802087722422188007206","123472932445009553035132329205111497568","181873263106833143734032581708970171590","107273918457926461780311064003247032715","147339017268984340831680690125592094109","204650640951282504596949468831163244682","271682452468228440321971937327450602646","236793103813656171845365627592502695950","2661089629244154836444336012189617226","266333731461658612893477822324602924023","329023115749001533209340526230651137555","306791284690053143481113830021153389219","72369417267567532458302776021881060269","13738075271674518044433997448097762802","157771367135552053078511831897213757024","156758984139488230215478123152352371910","249849100611595785237343372920530387566","194932937913506481802087722422188007206","123472932445009553035132329205111497568","181873263106833143734032581708970171590","107273918457926461780311064003247032715","147339017268984340831680690125592094109","246290184337760266982854361281079833975","13878708453417339791212446749096984497","248017003543349247934862224467183706432","103656967080921765944165721999031179550","106730855596405566784992241471206799182","143603700676125544107186165097569302763","327796898527407928919318511986535904263","205704946471925908933651469033005771491","40853706854419155219593622709991134196","263022673255841648122310815505675126879","158666436573356214207438011440791252430","234820297883264377773106915463130681687","11855676536401775832473723445156310237","313749514821960783515227170522625610359","267764643232578012942924308893935783466","129781245862794606390214953554567102861","187460565399382891206026222825329294799","235797929804175494559494777629666440201","5924433603897703822766982341526123649","228632175398585811845879828242063779011","297614918965869728031250614707238210729","250816919385173155907937876043232449012","84290606092516394072942080923893053336","101250214623502778275561052249910371981","312145645931028540065861721946958500022","181072352751185562375543999767515171630","132375415601553630814146296525098920480","89502220712481752634841705117879673812","133657728760842247695936444337156184613","215718062176647502280529724352526669993","68326452591454619357481509683127628957","204370426542497043171444476122607308403","318012559694167040450283647791510152811","74404438550205166842966698553266116158","268482551913239303052647079858823025175","339246734182365232702701071712504118700","309645227999125388095510666326033630588","114641386530328297560953127843632437592","181303390354843739786513606728284218086","156973238630920255537983279361892936131","139342735057742143231746971007231962080","38731288249908455729350508578929860047","47628070389140676669456571554149000076","144903254855782891791859864483889738486","194979877692120364800705659088568673289","324868075312469752213224420938519589413","46493022310691477006375058850312867470","203416944935169875301489066972405407005","226165714942954635112525209678002248268","109520002180399719492456329599768705811","131470370417034545344120544358672228305","1363927566747624422527626610547213617","335251343293971076495730754455571505211","313000940635263657909070627315346541080","217568048151893290606329598940122195032","315481910636346528385623699097532472905","162139768969197664764689219580895092980","194052773294704575892962442107046570124","338078086255186414450107855115274928","199271388700905067547250670192603291707","39743644352646749495967185029750970109","122985485607345846418617111266366202983","105674406090452876526465258252576151201","185548244203364789104558528251003269796","194841132733995522263978366182286025135","130541495566879924548575186715213501634","141111075066892358226121861824892083945","37153614539680263243270522393638681519","176055131951549243519814315535755201565","2230003705463054084891264233512458608","165357484559355005368911758866501604645","236448224630955881718082797435362169471","254865933425008162024573271023161730839","232762289338323259249714898569738556420","227414125902121034423934419770358073119","303443209403037413624504935983509511","312503101831374165465459670964112681476","125767198211962573902107127477790884549","98361608347058699580207351501048654836","190479679316333721096674612491350990586","181853504345657977433312511930456289034","81690022840049188234909982443543693451","327443190328122813922170003143339319984","73699030640796817448463769146473516530","254068213516987744192396289652480344105","104519681879663984592974874005604266679","5264046739305888797425246419422549213","94384319061898063501110647177877685191","127664624407475433841456726158578499524"]},"id":"ASB-A-489081076-ec8e35c6","signature_type":"Line","signature_version":"v1"},{"source":"https://git.codelinaro.org/clo/la/abl/tianocore/edk2/commit/f08125d8276c21d93a997bd031938454f71ab7b5","target":{"file":"QcomModulePkg/Library/gbl/GblOsConfigurationProtocol.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["245008145013830711028500473012854429386","123850273226884238917982849727513546707","23893789045735412946701207215545350672","130228874880131702269955253684091393286","200084754353495645147567277153408948811","175522255179675456882928147624087918228","273220382794990732720471062501925422034","171318318646059318412396262465021980980","107311698586192511226718816859481322972","299936290759338171424727316467003131956","315664321196363921582583714206033983647","112403791700959955734867734893762985230","127980397531809620298476550283182436700","206102824976904960233106019791690618840","177008586785438283127996353618017341009","100923921408426175500965808211591796989","305640827597247059655397341706832941608","234798636407625365377688166464675819521","55825946244686826044511972784107423581","241331735969880182170119750912752561117","175299340498867684614039982792659711040","73385525318852588378680099426169498081","240893492154904426316050272758112848095","9523399126480857791171241115597745584","35706278822583019611186145598115045973","217438071946317177022471140082600230247","292098704490300654156341238749760501404","168731962684861500057795194406510523910","252613883917975912943571648397926606769","275857545673397070274755077592088804320","1737915939807128584849718348829790455","33548339942086170048235626306052834108","142185654540352248269349137714655962952","241586179197374079610318220220847245133","130472928333865965551152694275086906512","171612750663308115811706797287984874248","313025014426807260460197985914921864919","276403834901450781854455732393795720058","294078132167984968730614879347848113303","172638460874287172781866668714859536423","213163559699959796020208289759015271771","90610631026666601873594198250576104424","33914965797171422815624128781953559970","320094675626376212043549006480455915138","85200662292469553958390715095592755336","129285258954696818234143668589371731274","169903352063272835020734842353342031273","235240609585676360649653632196696245028","112640762202503735210397366244651551734","178142927087784113268606625882302517845","82460721451610327041002912825498079178","257580907760626138320034874632108177922","87518083629204165324575685081919045130","144283329477880012174658127070845235313","82570381474759731037348380018123850046","349958391439703599376437076420890703","234164385637400531526027250208742967701","114911480407908673545448988506183610422","137069315619635058327321919219161032533","61998370137132875107343787252571970802","59919728754038626807008952652968946916","176167232467295456501370606750569792675","37081457547723537007116850413132058863","86361764791523209815373562900416726339","205144407966039392313344508979591211599","161758035485883912117451647593002572745","239101097122636013092529138719209126013","205661506593752092493746774036392118823","291652093686379816726099315980139516902","205641709737037637836875041285032146519","220541630774295043993633291564826088146","310120003836590338109743234692609226094","195690739291745876585550640461073581628","100047126490247157200111284020466524008","123355320386802425665549917011321215063","248118748853382793523696413158485462285","132599215708356229275963591136764545705","232268235244743244100666052137171021721","273543418706843993665163318866084110911","78275362996087299990402563068841284422","324227656929416904870159187405847423550","900695505498926048163759890936462589","53867408074892035348655904041903542258","239498308270550655752588678683869474743","274352639538430463367492954295395117107","16386258643462084459546753307202378008","309899407950075820216832328726459296183","66753844110785212171019763993325002399","231718483756443985504478181654721770630","242983013836325953591914456646938679010","110215793741956005757416929698028099799","275045504565555344594872406217516306357","140060484074000668010730370154210641018","326318224919894453331071649400874046493","121460838217213414050516762976133723918","29697957165659808915552720959693880374","202059777229685751148061092203187429351","251138897773550557280997009794966525681","296723057736291880342073996236332061101","1380822916516870328889526933172485069","67516462619520625188813444691288297841","163554021207173528760667895051471724054","38695702980351329111745664457205863419","127609413122431346552431329804270925297","335971630845060839536899132863412763697","264428252307870286560925165382497838097","169042351787833138722047013125735676061","338083681267544240090170313548678874960","331672860627532230598620643337739074823","140503267658768587217648635000216800145","217059954067258639132526771648572667377","229367164583409436220129027507451521782","54408119648983101990066540184634040458","238800648123684720885992686645570952007","315830171049551711463857486225891255637","27567911843964919635299151641482609030","92679408262883173056966567795234113874","45962535259984263149362129181103385984","257397991834081479514011761587210086030","8657624806006179627190962564414066750","174350565712713205251293604098334509882","169531978526623725587632304197198288559","47547444742797300386395018302098216790","226988471026247948116236509370890403702","288189928814786424228304072928307348331","206096115048744041522995370808274379436","260339159186252638021267899956166289738","166911781582096438415214370408487834285","74190966855293045205105895125818337753","311642711373046982880343711941997384011","111518743894775517313584498544849587557","272648802477871552454023507472699778792","331166619912458320534711189376491360051","119586288343230148831425011044584136922","284161111748009762161887412672632714381","209175959498946603509654202387017493235","225657384391599321895955193235955379551","39945989672089622664895698499212424956","6949482465530032120068092313256167865","265636322124199861574301568669102841453","98587234558581097989741402202044058084","168921523489763423639850837960679068882","323857538560405294495535272768372354190","5725935922389919219820183894398988436","12341657089571471463531877014151484695","46327823035547101254510323059637222384","4562605912364335099059230963549049736","210978706628099045452629694940523146291","138467391089906122702129926038464248441","3933570425519439293304234539869805946","75739352313161815774933579558591711514","175932391138473730676490503366596980052","59752094108516507430724575836910420989","339218383720996150049095060926003563077","166214579395288505479898013777829003882","213042398676167130702338928341909838784","151123475471119471997646275858836590332","52819598095815019659082099525666812773","241284093595011052436370908871973530024","160549024003895920812592010973653822318","271993917628606342880478092512336920308","30564820948261088601329391395865015165","4728778398111644842874379641021866441","295944069135027871433438112998869152061","122090176609172409800218318972929600665","280586258804088163331366787465254309949","307087423340876756309937724852258047162","309712841517298699176235282653979741703","114775629157758648408533817733420455446","339829870837922990675956333577745613148","1331318080065536725499097712879282925","316208742283694657174130548041002190007","168095085159640913989192472095457418647","27266060966418264017019004637283909853","276563025745911988707762828915454309594","279403729113384474652597527327697795931","37149890251374285218247265614920901446","174213640939016112804439980008949019676","294996479419728029611538113998039299258","55378090662250743480425863724968033579","230323455097172465846607907160088196309","288155716957603158446918811694419333445","271515496466999856779199358856918493040","261477458402222546803678546047894156517","226427783889647463965382744510655764968","329033472341617898701895811160384202712","1102675579334002214894259395229369844","176573606128334026469075981392810261220","308403176932073871542470323521440526477","315958134535949253642285951598554682937","335075253342242748168296789668589538128","47090360057063902047898438115910514796","320714189183640976127297483414012362619","335605887242172906678708238279321058382","145876919584017039742915722637214429224","289767155384048193401790686802487264958","214913201979425854403607472389292408705","334010514509292637937108749095974171721","181076784447886699302721667025004192000","201521468690657993521203436213178714385","218381872597080458348351508653669801767","28895958161142002445435660334640677072","292231306633738369080714290861425830542","102363750609529461625133616216661383428"]},"id":"ASB-A-489081076-fd656bda","signature_type":"Line","signature_version":"v1"}],"fixes":["https://git.codelinaro.org/clo/la/abl/tianocore/edk2/-/commit/f08125d8276c21d93a997bd031938454f71ab7b5"],"severity":"High","spl":"2026-09-05"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-489081076.json"}}],"schema_version":"1.9.0"}