{"id":"ASB-A-513581389","details":"In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-513581389","CVE-2026-55256"],"modified":"2026-09-09T15:15:54.249544283Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/d72b3170cb597b52eb792d81290084fe92bf1ef9","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"]},"id":"ASB-A-513581389-0414aa87","signature_type":"Line"},{"target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"parsePartHeaders"},"deprecated":false,"digest":{"length":2894,"function_hash":"334848964155251062634198088140463209687"},"id":"ASB-A-513581389-48013f94","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/d72b3170cb597b52eb792d81290084fe92bf1ef9"}],"fixes":["https://android.googlesource.com/platform/development/+/d72b3170cb597b52eb792d81290084fe92bf1ef9"],"severity":"Critical","spl":"2026-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"function_hash":"334848964155251062634198088140463209687","length":2894},"id":"ASB-A-513581389-a87b1e52","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7ae2a8139ff4593459d6278fc498dd6936ed9f26","target":{"function":"parsePartHeaders","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/7ae2a8139ff4593459d6278fc498dd6936ed9f26","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"],"threshold":0.9},"id":"ASB-A-513581389-fe4bad8d","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7ae2a8139ff4593459d6278fc498dd6936ed9f26"],"severity":"Critical","spl":"2026-09-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-09-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/421c62127bdaa7bf5ee87205cb573f5f0fdafb52"],"severity":"Critical","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"target":{"function":"parsePartHeaders","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-513581389-e02e5d2a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/421c62127bdaa7bf5ee87205cb573f5f0fdafb52"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/421c62127bdaa7bf5ee87205cb573f5f0fdafb52","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"]},"id":"ASB-A-513581389-f2777ed2"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-09-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"digest":{"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"],"threshold":0.9},"id":"ASB-A-513581389-48acb06e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d64454996e013390452941ab0bda62eb8570690","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false},{"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-513581389-ea427c14","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5d64454996e013390452941ab0bda62eb8570690","target":{"function":"parsePartHeaders","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5d64454996e013390452941ab0bda62eb8570690"],"severity":"Critical","spl":"2026-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/d0b1aee413a6ff6b9a9afe853ba78509730233ed"],"severity":"Critical","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/d0b1aee413a6ff6b9a9afe853ba78509730233ed","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"],"threshold":0.9},"id":"ASB-A-513581389-2b415f40"},{"id":"ASB-A-513581389-c7dabd73","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/d0b1aee413a6ff6b9a9afe853ba78509730233ed","target":{"function":"parsePartHeaders","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/cc7b079413126dd57cf57efeb61d3c2c1f0df08c"],"severity":"Critical","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"]},"id":"ASB-A-513581389-0ce6ac7c","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/cc7b079413126dd57cf57efeb61d3c2c1f0df08c"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/cc7b079413126dd57cf57efeb61d3c2c1f0df08c","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parsePartHeaders"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-513581389-8c24277b","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/27ef7b34479280996cc51f9ee20890efe6aa1e7e"],"severity":"Critical","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/development/+/27ef7b34479280996cc51f9ee20890efe6aa1e7e","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"],"threshold":0.9},"id":"ASB-A-513581389-86b19cac","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/development/+/27ef7b34479280996cc51f9ee20890efe6aa1e7e","target":{"function":"parsePartHeaders","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-513581389-e16d1f37","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/5bff1d73a66a76d7de8beb49d8207157fdff5a71"],"severity":"Critical","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"id":"ASB-A-513581389-62db124c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5bff1d73a66a76d7de8beb49d8207157fdff5a71","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parsePartHeaders"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717}},{"deprecated":false,"digest":{"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"],"threshold":0.9},"id":"ASB-A-513581389-73af98b8","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/5bff1d73a66a76d7de8beb49d8207157fdff5a71","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-513581389-3fe64e6f","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/6e2d69a3c5360f3f70f1ce1f8e361d176a631d8c","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"parsePartHeaders"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/6e2d69a3c5360f3f70f1ce1f8e361d176a631d8c","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"]},"id":"ASB-A-513581389-780952e6"}],"fixes":["https://android.googlesource.com/platform/development/+/6e2d69a3c5360f3f70f1ce1f8e361d176a631d8c"],"severity":"Critical","spl":"2026-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"]},"id":"ASB-A-513581389-4f1793c7","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/15d5a254e10047e1bbddb6b7d1de315835190387"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/15d5a254e10047e1bbddb6b7d1de315835190387","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parsePartHeaders"},"deprecated":false,"digest":{"length":2717,"function_hash":"139209452558366853462507679697327071354"},"id":"ASB-A-513581389-e4c01d7f","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/15d5a254e10047e1bbddb6b7d1de315835190387"],"severity":"Critical","spl":"2026-09-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-09-01"}]}],"versions":["14"],"ecosystem_specific":{"severity":"Critical","spl":"2026-09-01","types":["DoS"],"vanir_signatures":[{"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-513581389-734dfb99","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/0528981dd39213d3a2f678f69489f667a1e4f34e","target":{"function":"parsePartHeaders","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false},{"id":"ASB-A-513581389-7869b5a6","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/0528981dd39213d3a2f678f69489f667a1e4f34e","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"]}}],"fixes":["https://android.googlesource.com/platform/development/+/0528981dd39213d3a2f678f69489f667a1e4f34e"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-09-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/683ce0476b6d53e363014d91aee49f1e200a8aac","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["142753661400032712952520225180075874283","279718015445828485956211179825455582116","293808198340319723335735378833586477118","228380082209694445135472943080580415479","146694696859313837855813612844997967728","95153332327285614191313206450219384003","53207138459955910017911677960981216681","50828770098273018613954893137366601237","227029905332151664031538809299041445898","146694696859313837855813612844997967728","184001240547734718021832429594969361894","77812751738075342271363341439217604664","250364202518561917982132868305756238723","38023406877697203983208763964391772216"],"threshold":0.9},"id":"ASB-A-513581389-69c793a6"},{"id":"ASB-A-513581389-b92c3a9d","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/683ce0476b6d53e363014d91aee49f1e200a8aac","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parsePartHeaders"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/683ce0476b6d53e363014d91aee49f1e200a8aac"],"severity":"Critical","spl":"2026-09-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-513581389.json"}}],"schema_version":"1.9.0"}