{"id":"ASB-A-499091487","aliases":["A-499091487","CVE-2026-55290"],"modified":"2026-09-09T15:15:54.249544283Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["ID"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/968cb0736ca65b22a3c7230820912adffa452b1e","target":{"function":"ResStringPool::setTo","file":"libs/androidfw/ResourceTypes.cpp"},"deprecated":false,"digest":{"function_hash":"82927214188281483027407755748785347527","length":7521},"id":"ASB-A-499091487-812ba99d","signature_type":"Function","signature_version":"v1"},{"target":{"file":"libs/androidfw/ResourceTypes.cpp"},"deprecated":false,"digest":{"line_hashes":["88958440904460497466319070628507512145","308094730269684789193377031438851988280","149543111414257474815542172975173080566","197460429687274194980235530983418745832","160247247945018854162786087294752691740","161130232973007711014190462255313502703","64423158904939564595540958825540183875","179328279256324776839278103542427480684","267598622964433476085441998512542255931","118327174711115137808705309722244310013","104858848947964987160830302403517661649","130522839896885241388152400567527703555","66806255186088284987293822666513622897","96896572782832791328411877253452490085","200945432685477963557656037427954248813","123927014082303466244311091545631431393","258909741659923299611219088770757843110","239393316848012953757523240799303122435","183896264587861673598148935309463180915","160604242386151727215178653780606597400","210949481534006291668838556491400974916","337814240897319559102765744692188941287","185491210705835820856068630844988561431","113412598032795088045255255379303606215","306572923216154041055704698458741029683","146292951287316629006329247049540378873","332327962866772784024985154157400931817"],"threshold":0.9},"id":"ASB-A-499091487-b26d9327","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/968cb0736ca65b22a3c7230820912adffa452b1e"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/968cb0736ca65b22a3c7230820912adffa452b1e"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-09-01"}]}],"versions":["15"],"ecosystem_specific":{"spl":"2026-09-01","types":["ID"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fd6d49e8bfcc4c42e380e01baf6e186c33916bcb","target":{"file":"libs/androidfw/ResourceTypes.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["88958440904460497466319070628507512145","308094730269684789193377031438851988280","149543111414257474815542172975173080566","197460429687274194980235530983418745832","160247247945018854162786087294752691740","161130232973007711014190462255313502703","64423158904939564595540958825540183875","179328279256324776839278103542427480684","267598622964433476085441998512542255931","118327174711115137808705309722244310013","104858848947964987160830302403517661649","130522839896885241388152400567527703555","66806255186088284987293822666513622897","96896572782832791328411877253452490085","200945432685477963557656037427954248813","123927014082303466244311091545631431393","258909741659923299611219088770757843110","239393316848012953757523240799303122435","183896264587861673598148935309463180915","160604242386151727215178653780606597400","210949481534006291668838556491400974916","337814240897319559102765744692188941287","185491210705835820856068630844988561431","113412598032795088045255255379303606215","306572923216154041055704698458741029683","146292951287316629006329247049540378873","332327962866772784024985154157400931817"]},"id":"ASB-A-499091487-2831ab10"},{"target":{"file":"libs/androidfw/ResourceTypes.cpp","function":"ResStringPool::setTo"},"deprecated":false,"digest":{"length":7521,"function_hash":"82927214188281483027407755748785347527"},"id":"ASB-A-499091487-fa55ad7c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fd6d49e8bfcc4c42e380e01baf6e186c33916bcb"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fd6d49e8bfcc4c42e380e01baf6e186c33916bcb"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f4a6d1160920868b9ba354f84023e39371a8c2ba"],"severity":"High","spl":"2026-09-01","types":["ID"],"vanir_signatures":[{"digest":{"length":7521,"function_hash":"82927214188281483027407755748785347527"},"id":"ASB-A-499091487-023aadd5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f4a6d1160920868b9ba354f84023e39371a8c2ba","target":{"file":"libs/androidfw/ResourceTypes.cpp","function":"ResStringPool::setTo"},"deprecated":false},{"target":{"file":"libs/androidfw/ResourceTypes.cpp"},"deprecated":false,"digest":{"line_hashes":["88958440904460497466319070628507512145","308094730269684789193377031438851988280","149543111414257474815542172975173080566","197460429687274194980235530983418745832","160247247945018854162786087294752691740","161130232973007711014190462255313502703","64423158904939564595540958825540183875","179328279256324776839278103542427480684","267598622964433476085441998512542255931","118327174711115137808705309722244310013","104858848947964987160830302403517661649","130522839896885241388152400567527703555","66806255186088284987293822666513622897","96896572782832791328411877253452490085","200945432685477963557656037427954248813","123927014082303466244311091545631431393","258909741659923299611219088770757843110","239393316848012953757523240799303122435","183896264587861673598148935309463180915","160604242386151727215178653780606597400","210949481534006291668838556491400974916","337814240897319559102765744692188941287","185491210705835820856068630844988561431","113412598032795088045255255379303606215","306572923216154041055704698458741029683","146292951287316629006329247049540378873","332327962866772784024985154157400931817"],"threshold":0.9},"id":"ASB-A-499091487-d134417b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f4a6d1160920868b9ba354f84023e39371a8c2ba"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"severity":"High","spl":"2026-09-01","types":["ID"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"82927214188281483027407755748785347527","length":7521},"id":"ASB-A-499091487-989b50c8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/42e2f10a060bc130317e8e7f6bb7a146575938d6","target":{"file":"libs/androidfw/ResourceTypes.cpp","function":"ResStringPool::setTo"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/42e2f10a060bc130317e8e7f6bb7a146575938d6","target":{"file":"libs/androidfw/ResourceTypes.cpp"},"deprecated":false,"digest":{"line_hashes":["88958440904460497466319070628507512145","308094730269684789193377031438851988280","149543111414257474815542172975173080566","197460429687274194980235530983418745832","160247247945018854162786087294752691740","161130232973007711014190462255313502703","64423158904939564595540958825540183875","179328279256324776839278103542427480684","267598622964433476085441998512542255931","118327174711115137808705309722244310013","104858848947964987160830302403517661649","130522839896885241388152400567527703555","66806255186088284987293822666513622897","96896572782832791328411877253452490085","200945432685477963557656037427954248813","123927014082303466244311091545631431393","258909741659923299611219088770757843110","239393316848012953757523240799303122435","183896264587861673598148935309463180915","160604242386151727215178653780606597400","210949481534006291668838556491400974916","337814240897319559102765744692188941287","185491210705835820856068630844988561431","113412598032795088045255255379303606215","306572923216154041055704698458741029683","146292951287316629006329247049540378873","332327962866772784024985154157400931817"],"threshold":0.9},"id":"ASB-A-499091487-b9ae7da1","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/42e2f10a060bc130317e8e7f6bb7a146575938d6"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0aa6ef39a4277197f1a216904fcb8e1c034c4299","target":{"file":"libs/androidfw/ResourceTypes.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["88958440904460497466319070628507512145","308094730269684789193377031438851988280","149543111414257474815542172975173080566","197460429687274194980235530983418745832","160247247945018854162786087294752691740","161130232973007711014190462255313502703","64423158904939564595540958825540183875","179328279256324776839278103542427480684","267598622964433476085441998512542255931","118327174711115137808705309722244310013","104858848947964987160830302403517661649","130522839896885241388152400567527703555","66806255186088284987293822666513622897","96896572782832791328411877253452490085","200945432685477963557656037427954248813","123927014082303466244311091545631431393","258909741659923299611219088770757843110","239393316848012953757523240799303122435","183896264587861673598148935309463180915","160604242386151727215178653780606597400","210949481534006291668838556491400974916","337814240897319559102765744692188941287","185491210705835820856068630844988561431","113412598032795088045255255379303606215","306572923216154041055704698458741029683","146292951287316629006329247049540378873","332327962866772784024985154157400931817"]},"id":"ASB-A-499091487-05b84fe7"},{"deprecated":false,"digest":{"length":7521,"function_hash":"82927214188281483027407755748785347527"},"id":"ASB-A-499091487-787ac51a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/0aa6ef39a4277197f1a216904fcb8e1c034c4299","target":{"file":"libs/androidfw/ResourceTypes.cpp","function":"ResStringPool::setTo"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0aa6ef39a4277197f1a216904fcb8e1c034c4299"],"severity":"High","spl":"2026-09-01","types":["ID"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-09-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/72a322b401716222debbb8bd94e87ed805939224"],"severity":"High","spl":"2026-09-01","types":["ID"],"vanir_signatures":[{"id":"ASB-A-499091487-376d790a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/72a322b401716222debbb8bd94e87ed805939224","target":{"function":"ResStringPool::setTo","file":"libs/androidfw/ResourceTypes.cpp"},"deprecated":false,"digest":{"length":7292,"function_hash":"249077544555284930475303052642442529713"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/72a322b401716222debbb8bd94e87ed805939224","target":{"file":"libs/androidfw/ResourceTypes.cpp"},"deprecated":false,"digest":{"line_hashes":["88958440904460497466319070628507512145","308094730269684789193377031438851988280","149543111414257474815542172975173080566","197460429687274194980235530983418745832","160247247945018854162786087294752691740","161130232973007711014190462255313502703","64423158904939564595540958825540183875","179328279256324776839278103542427480684","267598622964433476085441998512542255931","118327174711115137808705309722244310013","104858848947964987160830302403517661649","130522839896885241388152400567527703555","66806255186088284987293822666513622897","96896572782832791328411877253452490085","200945432685477963557656037427954248813","123927014082303466244311091545631431393","258909741659923299611219088770757843110","239393316848012953757523240799303122435","183896264587861673598148935309463180915","160604242386151727215178653780606597400","210949481534006291668838556491400974916","337814240897319559102765744692188941287","185491210705835820856068630844988561431","113412598032795088045255255379303606215","306572923216154041055704698458741029683","146292951287316629006329247049540378873","332327962866772784024985154157400931817"],"threshold":0.9},"id":"ASB-A-499091487-3a6c16a1","signature_type":"Line","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-499091487.json"}}],"schema_version":"1.9.0"}