{"id":"ASB-A-503542266","details":"In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-503542266","CVE-2026-58853"],"modified":"2026-11-02T17:11:20.787568320Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/packages/services/BuiltInPrintService","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"318714576146959092333388397084734276892","length":392},"id":"ASB-A-503542266-60194fcf","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/852c02f88419183d0469e833f232e178cc6f53e0","target":{"function":"addMediaIfNotDuplicate","file":"jni/ipphelper/ipphelper.c"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/852c02f88419183d0469e833f232e178cc6f53e0","target":{"file":"jni/ipphelper/ipphelper.c","function":"parse_getMediaSupported"},"deprecated":false,"digest":{"function_hash":"223460226343174318896427208934806637857","length":3727},"id":"ASB-A-503542266-606cdb4e","signature_type":"Function"},{"target":{"file":"jni/ipphelper/ipphelper.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["3122932750886125146867982340547526667","278854037664755164011944313294508738918","190032713861964511511920936907551196188","235031877808563053179871009076656301463","280407706021535548824027136490620202011","125164917052577894891275486800494765733","228172977840114402194899453239178863025","30762705718947172485290489850490959200"]},"id":"ASB-A-503542266-cc21f1d1","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/852c02f88419183d0469e833f232e178cc6f53e0"}],"fixes":["https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/852c02f88419183d0469e833f232e178cc6f53e0"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503542266.json"}},{"package":{"name":"platform/packages/services/BuiltInPrintService","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"jni/ipphelper/ipphelper.c","function":"addMediaIfNotDuplicate"},"deprecated":false,"digest":{"function_hash":"318714576146959092333388397084734276892","length":392},"id":"ASB-A-503542266-7d0a3f3f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/ee22adf7b1633851559ede713ef236cda853b5bd"},{"digest":{"function_hash":"331433994153440631022595870541633280355","length":3567},"id":"ASB-A-503542266-c766f2b5","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/ee22adf7b1633851559ede713ef236cda853b5bd","target":{"file":"jni/ipphelper/ipphelper.c","function":"parse_getMediaSupported"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["3122932750886125146867982340547526667","278854037664755164011944313294508738918","190032713861964511511920936907551196188","235031877808563053179871009076656301463","280407706021535548824027136490620202011","125164917052577894891275486800494765733","228172977840114402194899453239178863025","30762705718947172485290489850490959200"],"threshold":0.9},"id":"ASB-A-503542266-d7267860","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/ee22adf7b1633851559ede713ef236cda853b5bd","target":{"file":"jni/ipphelper/ipphelper.c"}}],"fixes":["https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/ee22adf7b1633851559ede713ef236cda853b5bd"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503542266.json"}},{"package":{"name":"platform/packages/services/BuiltInPrintService","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/be23ef2228a6814cc1eafcda3f8835e344abe48b"],"severity":"High","spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/be23ef2228a6814cc1eafcda3f8835e344abe48b","target":{"function":"parse_getMediaSupported","file":"jni/ipphelper/ipphelper.c"},"deprecated":false,"digest":{"function_hash":"323793181185082495905795815378194397472","length":3751},"id":"ASB-A-503542266-22b389ea","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/be23ef2228a6814cc1eafcda3f8835e344abe48b","target":{"file":"jni/ipphelper/ipphelper.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["3122932750886125146867982340547526667","278854037664755164011944313294508738918","190032713861964511511920936907551196188","235031877808563053179871009076656301463","280407706021535548824027136490620202011","125164917052577894891275486800494765733","228172977840114402194899453239178863025","30762705718947172485290489850490959200"]},"id":"ASB-A-503542266-7a3d5801"},{"id":"ASB-A-503542266-a87e1c47","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/be23ef2228a6814cc1eafcda3f8835e344abe48b","target":{"file":"jni/ipphelper/ipphelper.c","function":"addMediaIfNotDuplicate"},"deprecated":false,"digest":{"length":392,"function_hash":"318714576146959092333388397084734276892"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503542266.json"}},{"package":{"name":"platform/packages/services/BuiltInPrintService","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/ad73bae388f290a2fc6eba5c79189ea12dcbbf3e","target":{"function":"addMediaIfNotDuplicate","file":"jni/ipphelper/ipphelper.c"},"deprecated":false,"digest":{"length":392,"function_hash":"318714576146959092333388397084734276892"},"id":"ASB-A-503542266-667ce3a4"},{"source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/ad73bae388f290a2fc6eba5c79189ea12dcbbf3e","target":{"file":"jni/ipphelper/ipphelper.c","function":"parse_getMediaSupported"},"deprecated":false,"digest":{"function_hash":"323793181185082495905795815378194397472","length":3751},"id":"ASB-A-503542266-978f3639","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/ad73bae388f290a2fc6eba5c79189ea12dcbbf3e","target":{"file":"jni/ipphelper/ipphelper.c"},"deprecated":false,"digest":{"line_hashes":["3122932750886125146867982340547526667","278854037664755164011944313294508738918","190032713861964511511920936907551196188","235031877808563053179871009076656301463","280407706021535548824027136490620202011","125164917052577894891275486800494765733","228172977840114402194899453239178863025","30762705718947172485290489850490959200"],"threshold":0.9},"id":"ASB-A-503542266-c2164f1c","signature_type":"Line"}],"fixes":["https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/ad73bae388f290a2fc6eba5c79189ea12dcbbf3e"],"severity":"High","spl":"2026-11-01","types":["EoP"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503542266.json"}},{"package":{"name":"platform/packages/services/BuiltInPrintService","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"223460226343174318896427208934806637857","length":3727},"id":"ASB-A-503542266-3110942b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/d3e4806a36b4405b977e987bea7f48984a7a4b44","target":{"function":"parse_getMediaSupported","file":"jni/ipphelper/ipphelper.c"}},{"digest":{"length":392,"function_hash":"318714576146959092333388397084734276892"},"id":"ASB-A-503542266-a6356345","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/d3e4806a36b4405b977e987bea7f48984a7a4b44","target":{"file":"jni/ipphelper/ipphelper.c","function":"addMediaIfNotDuplicate"},"deprecated":false},{"target":{"file":"jni/ipphelper/ipphelper.c"},"deprecated":false,"digest":{"line_hashes":["3122932750886125146867982340547526667","278854037664755164011944313294508738918","190032713861964511511920936907551196188","235031877808563053179871009076656301463","280407706021535548824027136490620202011","125164917052577894891275486800494765733","228172977840114402194899453239178863025","30762705718947172485290489850490959200"],"threshold":0.9},"id":"ASB-A-503542266-e25493f6","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/d3e4806a36b4405b977e987bea7f48984a7a4b44"}],"fixes":["https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/d3e4806a36b4405b977e987bea7f48984a7a4b44"],"severity":"High","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503542266.json"}},{"package":{"name":"platform/packages/services/BuiltInPrintService","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2026-11-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"331433994153440631022595870541633280355","length":3567},"id":"ASB-A-503542266-235ecacd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/8bcc48b1b063b668669a708e871e2c76d6e6e293","target":{"file":"jni/ipphelper/ipphelper.c","function":"parse_getMediaSupported"}},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/8bcc48b1b063b668669a708e871e2c76d6e6e293","target":{"file":"jni/ipphelper/ipphelper.c","function":"addMediaIfNotDuplicate"},"deprecated":false,"digest":{"length":392,"function_hash":"318714576146959092333388397084734276892"},"id":"ASB-A-503542266-76b216fa"},{"digest":{"threshold":0.9,"line_hashes":["3122932750886125146867982340547526667","278854037664755164011944313294508738918","190032713861964511511920936907551196188","235031877808563053179871009076656301463","280407706021535548824027136490620202011","125164917052577894891275486800494765733","228172977840114402194899453239178863025","30762705718947172485290489850490959200"]},"id":"ASB-A-503542266-7726daa5","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/8bcc48b1b063b668669a708e871e2c76d6e6e293","target":{"file":"jni/ipphelper/ipphelper.c"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/packages/services/BuiltInPrintService/+/8bcc48b1b063b668669a708e871e2c76d6e6e293"],"severity":"High"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-503542266.json"}}],"schema_version":"1.9.2"}