{"id":"ASB-A-517377150","details":"In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-517377150","CVE-2026-55265"],"modified":"2026-10-05T16:41:14.317648066Z","published":"2026-10-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-10-01"}],"affected":[{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-10-01"}]}],"versions":["17-next"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","316914648920727318797279992064374633436","285739975939188764889955886281720911186","202883830019296998404307437662182241630","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"],"threshold":0.9},"id":"ASB-A-517377150-2cd27a16","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"skipWapValue"},"deprecated":false,"digest":{"length":221,"function_hash":"307988262085666920161556929475077940110"},"id":"ASB-A-517377150-ac86bb25","signature_type":"Function"},{"target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"parsePartHeaders"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-517377150-d433e5bb","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e"},{"digest":{"function_hash":"81903043649705649230325623504859643202","length":1968},"id":"ASB-A-517377150-e8f998ab","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e","target":{"function":"parseParts","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false}],"fixes":["https://android.googlesource.com/platform/development/+/8301b51be3c64341fa65fa9434c997fa3d5dbe8e"],"severity":"Critical","spl":"2026-10-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-10-01"}]}],"versions":["17-next"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc"],"severity":"Critical","spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parseParts"},"deprecated":false,"digest":{"length":1968,"function_hash":"81903043649705649230325623504859643202"},"id":"ASB-A-517377150-3102709a"},{"deprecated":false,"digest":{"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","189292235848414805027084279346301616595","7056861983714822828378052983803339987","200439674306176014353275823594484613726","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"],"threshold":0.9},"id":"ASB-A-517377150-7859222b","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}},{"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-517377150-e94f05dd","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc","target":{"function":"parsePartHeaders","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"}},{"digest":{"length":221,"function_hash":"307988262085666920161556929475077940110"},"id":"ASB-A-517377150-f1cc0223","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9862993afa7b85ef27146b0773e42794f520c5fc","target":{"function":"skipWapValue","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-10-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"Critical","spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33","target":{"function":"parseParts","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"81903043649705649230325623504859643202","length":1968},"id":"ASB-A-517377150-215ce1ec"},{"target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","316914648920727318797279992064374633436","285739975939188764889955886281720911186","202883830019296998404307437662182241630","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"],"threshold":0.9},"id":"ASB-A-517377150-76593d71","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33"},{"target":{"function":"skipWapValue","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"307988262085666920161556929475077940110","length":221},"id":"ASB-A-517377150-76c3c3e8","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33"},{"id":"ASB-A-517377150-cf2ba76b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33","target":{"function":"parsePartHeaders","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717}}],"fixes":["https://android.googlesource.com/platform/development/+/2ca82d76396303c29881d7fa549d94bc6f274a33"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-10-01"}]}],"versions":["15"],"ecosystem_specific":{"severity":"Critical","spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"skipWapValue"},"deprecated":false,"digest":{"function_hash":"307988262085666920161556929475077940110","length":221},"id":"ASB-A-517377150-0278d654","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","189292235848414805027084279346301616595","7056861983714822828378052983803339987","200439674306176014353275823594484613726","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"],"threshold":0.9},"id":"ASB-A-517377150-40d2adc3","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-517377150-f270e250","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parsePartHeaders"}},{"id":"ASB-A-517377150-ff4dc3c6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parseParts"},"deprecated":false,"digest":{"length":1968,"function_hash":"81903043649705649230325623504859643202"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/4a5fa93a13b6ebfccac598381fa4a4881004bfc9"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-10-01"}]}],"versions":["16"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092","target":{"function":"parsePartHeaders","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-517377150-3f7d37be","signature_type":"Function"},{"digest":{"length":221,"function_hash":"307988262085666920161556929475077940110"},"id":"ASB-A-517377150-5f1e94b1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"skipWapValue"},"deprecated":false},{"source":"https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092","target":{"function":"parseParts","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"81903043649705649230325623504859643202","length":1968},"id":"ASB-A-517377150-9fb6f350","signature_type":"Function","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","316914648920727318797279992064374633436","285739975939188764889955886281720911186","202883830019296998404307437662182241630","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"],"threshold":0.9},"id":"ASB-A-517377150-daea88a8","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/development/+/ceb926c9d643398f2404c31a2f6e00a3609f0092"],"severity":"Critical","spl":"2026-10-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-10-01"}]}],"versions":["16"],"ecosystem_specific":{"severity":"Critical","spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"digest":{"length":2717,"function_hash":"139209452558366853462507679697327071354"},"id":"ASB-A-517377150-081705ac","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f","target":{"function":"parsePartHeaders","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false},{"target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","189292235848414805027084279346301616595","7056861983714822828378052983803339987","200439674306176014353275823594484613726","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"],"threshold":0.9},"id":"ASB-A-517377150-16061ade","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f","target":{"function":"parseParts","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"81903043649705649230325623504859643202","length":1968},"id":"ASB-A-517377150-4f3ecf7e"},{"deprecated":false,"digest":{"function_hash":"307988262085666920161556929475077940110","length":221},"id":"ASB-A-517377150-7d977d67","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"skipWapValue"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/80e133b07803b4d29c002f4df1e1fded4903a34f"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-10-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"vanir_signatures":[{"id":"ASB-A-517377150-262adf6d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","316914648920727318797279992064374633436","285739975939188764889955886281720911186","202883830019296998404307437662182241630","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"]}},{"digest":{"function_hash":"307988262085666920161556929475077940110","length":221},"id":"ASB-A-517377150-5017e467","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"skipWapValue"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc","target":{"function":"parseParts","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"81903043649705649230325623504859643202","length":1968},"id":"ASB-A-517377150-aa5a6a93","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"parsePartHeaders"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-517377150-d4ab1367"}],"fixes":["https://android.googlesource.com/platform/development/+/ea2e128e53133b400c794288ece2810323385bdc"],"severity":"Critical","spl":"2026-10-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-10-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"severity":"Critical","spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"digest":{"length":1968,"function_hash":"81903043649705649230325623504859643202"},"id":"ASB-A-517377150-2add7a24","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parseParts"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","189292235848414805027084279346301616595","7056861983714822828378052983803339987","200439674306176014353275823594484613726","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"],"threshold":0.9},"id":"ASB-A-517377150-b62633b4","signature_type":"Line"},{"id":"ASB-A-517377150-c04fa2d3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"skipWapValue"},"deprecated":false,"digest":{"function_hash":"307988262085666920161556929475077940110","length":221}},{"target":{"function":"parsePartHeaders","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-517377150-de333493","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/8911eb570386f025578ad7d55b8a18e967ea4e51"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-10-01"}]}],"versions":["17"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4"],"severity":"Critical","spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"digest":{"threshold":0.9,"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","316914648920727318797279992064374633436","285739975939188764889955886281720911186","202883830019296998404307437662182241630","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"]},"id":"ASB-A-517377150-6d7cbf6d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false},{"digest":{"function_hash":"81903043649705649230325623504859643202","length":1968},"id":"ASB-A-517377150-762a47ae","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"parseParts"},"deprecated":false},{"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-517377150-d579e08b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4","target":{"function":"parsePartHeaders","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/development/+/ec7971faed3ab17006208e441e87d30c20dceee4","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"skipWapValue"},"deprecated":false,"digest":{"length":221,"function_hash":"307988262085666920161556929475077940110"},"id":"ASB-A-517377150-def50b9b","signature_type":"Function","signature_version":"v1"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-10-01"}]}],"versions":["17"],"ecosystem_specific":{"spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parseParts"},"deprecated":false,"digest":{"function_hash":"81903043649705649230325623504859643202","length":1968},"id":"ASB-A-517377150-1aca3d8e","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a"},{"id":"ASB-A-517377150-2a59c047","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parsePartHeaders"},"deprecated":false,"digest":{"length":2717,"function_hash":"139209452558366853462507679697327071354"}},{"source":"https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a","target":{"function":"skipWapValue","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"length":221,"function_hash":"307988262085666920161556929475077940110"},"id":"ASB-A-517377150-4486b8da","signature_type":"Function","signature_version":"v1"},{"id":"ASB-A-517377150-692dc441","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","189292235848414805027084279346301616595","7056861983714822828378052983803339987","200439674306176014353275823594484613726","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"]}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d982689e732a90cb31fb40bb409affd1f0aef49a"],"severity":"Critical"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-10-01"}]}],"versions":["14"],"ecosystem_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","316914648920727318797279992064374633436","285739975939188764889955886281720911186","202883830019296998404307437662182241630","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"]},"id":"ASB-A-517377150-2f536dcf","signature_type":"Line"},{"target":{"function":"skipWapValue","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"307988262085666920161556929475077940110","length":221},"id":"ASB-A-517377150-573ada8c","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9"},{"source":"https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"parsePartHeaders"},"deprecated":false,"digest":{"length":2717,"function_hash":"139209452558366853462507679697327071354"},"id":"ASB-A-517377150-a4b75880","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"parseParts"},"deprecated":false,"digest":{"function_hash":"81903043649705649230325623504859643202","length":1968},"id":"ASB-A-517377150-e1f167ec"}],"fixes":["https://android.googlesource.com/platform/development/+/dcde542288db4fcb56393b826219ab0a9f9734a9"],"severity":"Critical","spl":"2026-10-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-10-01"}]}],"versions":["14"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244"],"severity":"Critical","spl":"2026-10-01","types":["DoS"],"vanir_signatures":[{"source":"https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244","target":{"function":"parsePartHeaders","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"139209452558366853462507679697327071354","length":2717},"id":"ASB-A-517377150-7b2c0d14","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"307988262085666920161556929475077940110","length":221},"id":"ASB-A-517377150-80081593","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244","target":{"function":"skipWapValue","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false},{"source":"https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["115235806051313244474866949100208703067","39908776073765054527518864029502213196","275653553295305798105931955962627302090","315789821278986359943961842114991851786","273584783892463185486660509835404875994","189292235848414805027084279346301616595","7056861983714822828378052983803339987","200439674306176014353275823594484613726","193332972597265551523458097873810045930","278291187962647285066997893112381908747","2526927424068458653309312163334227701","93479104484888627398786694091720715034","212873390594843345403940431899395745769","288962015757965491310945920864062992047","37198973334187233653163172669674111813","141985895648357635255710093566769079978","133830731022674405831429499635994190490","177424558011605743484214171609036785073","308414417480901704148964930964916506416","290580744057020254864945879392239677470","66780706580694202590644247798608418592","303980660904542103297090327648050666155"]},"id":"ASB-A-517377150-8c46a561","signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/7961eb20412113c0df7d69b2e843bfe0c0471244","target":{"function":"parseParts","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"81903043649705649230325623504859643202","length":1968},"id":"ASB-A-517377150-b3b18b57"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517377150.json"}}],"schema_version":"1.9.0"}