{"id":"ASB-A-517378147","details":"In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-517378147","CVE-2026-58814"],"modified":"2026-11-02T17:11:09.639736928Z","published":"2026-11-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-11-01"}],"affected":[{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"severity":"Critical","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"id":"ASB-A-517378147-7747d3b1","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/96b449ebd537f20338faf8ee919fcf05acc55dda","target":{"function":"parseContentType","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"212162466717132089363479495165614142073","length":1385}},{"id":"ASB-A-517378147-c0e0f508","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/96b449ebd537f20338faf8ee919fcf05acc55dda","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["121854140715205234673495553654458523330","136409478165362966666182304695714260102","50075114396528856346053782771114903730","274524318765224122466007910025242301110"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/development/+/96b449ebd537f20338faf8ee919fcf05acc55dda"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-qpr2-next:0"},{"fixed":"17-qpr2-next:2026-11-01"}]}],"versions":["17-qpr2-next"],"ecosystem_specific":{"spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"id":"ASB-A-517378147-378034a4","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/dae26ce26b3388777225d91e931328b38f487286","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["138585907356049197651595769872137111095","75177937820477983286183616850905417630","201802036799063034230217332538066756020","93299189663075145488265851673479696756"]}},{"deprecated":false,"digest":{"length":1581,"function_hash":"128172258089473237359508295994700672622"},"id":"ASB-A-517378147-aadb7bb6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/dae26ce26b3388777225d91e931328b38f487286","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parseContentType"}}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/dae26ce26b3388777225d91e931328b38f487286"],"severity":"Critical"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["121854140715205234673495553654458523330","136409478165362966666182304695714260102","50075114396528856346053782771114903730","274524318765224122466007910025242301110"],"threshold":0.9},"id":"ASB-A-517378147-2a76a75e","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/cca4fb311881b2da3f767380e1a9be6ade7b58c6","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"}},{"source":"https://android.googlesource.com/platform/development/+/cca4fb311881b2da3f767380e1a9be6ade7b58c6","target":{"function":"parseContentType","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"212162466717132089363479495165614142073","length":1385},"id":"ASB-A-517378147-f80401c6","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/development/+/cca4fb311881b2da3f767380e1a9be6ade7b58c6"],"severity":"Critical","spl":"2026-11-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15:0"},{"fixed":"15:2026-11-01"}]}],"versions":["15"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/fdd87941eefb4029c0d4675080dbb3a4584903c1"],"severity":"Critical","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"id":"ASB-A-517378147-390e6ab9","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fdd87941eefb4029c0d4675080dbb3a4584903c1","target":{"function":"parseContentType","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"61383290368940746329447847865964857475","length":1726}},{"digest":{"line_hashes":["138585907356049197651595769872137111095","75177937820477983286183616850905417630","201802036799063034230217332538066756020","93299189663075145488265851673479696756"],"threshold":0.9},"id":"ASB-A-517378147-85b4d9f6","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fdd87941eefb4029c0d4675080dbb3a4584903c1","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/e1dcb41c9e64d44d0b96d945825bfd508d502f53"],"severity":"Critical","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/e1dcb41c9e64d44d0b96d945825bfd508d502f53","target":{"function":"parseContentType","file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"function_hash":"212162466717132089363479495165614142073","length":1385},"id":"ASB-A-517378147-9855491b","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/e1dcb41c9e64d44d0b96d945825bfd508d502f53","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["121854140715205234673495553654458523330","136409478165362966666182304695714260102","50075114396528856346053782771114903730","274524318765224122466007910025242301110"],"threshold":0.9},"id":"ASB-A-517378147-b8d9d979"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-11-01"}]}],"versions":["16"],"ecosystem_specific":{"vanir_signatures":[{"digest":{"line_hashes":["138585907356049197651595769872137111095","75177937820477983286183616850905417630","201802036799063034230217332538066756020","93299189663075145488265851673479696756"],"threshold":0.9},"id":"ASB-A-517378147-142b5da3","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f9abde7684ce9a94b377f5b1a046af3b099f80e4","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false},{"target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parseContentType"},"deprecated":false,"digest":{"length":1726,"function_hash":"61383290368940746329447847865964857475"},"id":"ASB-A-517378147-903d55c3","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f9abde7684ce9a94b377f5b1a046af3b099f80e4"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/f9abde7684ce9a94b377f5b1a046af3b099f80e4"],"severity":"Critical","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"vanir_signatures":[{"target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"parseContentType"},"deprecated":false,"digest":{"function_hash":"212162466717132089363479495165614142073","length":1385},"id":"ASB-A-517378147-beefee79","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/e58fa1093d402274dcf5b8109181e8563e73caa4"},{"source":"https://android.googlesource.com/platform/development/+/e58fa1093d402274dcf5b8109181e8563e73caa4","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["121854140715205234673495553654458523330","136409478165362966666182304695714260102","50075114396528856346053782771114903730","274524318765224122466007910025242301110"],"threshold":0.9},"id":"ASB-A-517378147-ebf09923","signature_type":"Line","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/development/+/e58fa1093d402274dcf5b8109181e8563e73caa4"],"severity":"Critical","spl":"2026-11-01","types":["DoS"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-11-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parseContentType"},"deprecated":false,"digest":{"length":1726,"function_hash":"61383290368940746329447847865964857475"},"id":"ASB-A-517378147-5fa366c6","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/962cdfc819c4b52af71d69f718292a2323b9ba8a"},{"target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["138585907356049197651595769872137111095","75177937820477983286183616850905417630","201802036799063034230217332538066756020","93299189663075145488265851673479696756"]},"id":"ASB-A-517378147-b6df8c2d","signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/962cdfc819c4b52af71d69f718292a2323b9ba8a"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/962cdfc819c4b52af71d69f718292a2323b9ba8a"],"severity":"Critical"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/development/+/a06134dbbf732f441d187f3722a2f6d9b8df7aae"],"severity":"Critical","spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"212162466717132089363479495165614142073","length":1385},"id":"ASB-A-517378147-05035c0b","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/a06134dbbf732f441d187f3722a2f6d9b8df7aae","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"parseContentType"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/a06134dbbf732f441d187f3722a2f6d9b8df7aae","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["121854140715205234673495553654458523330","136409478165362966666182304695714260102","50075114396528856346053782771114903730","274524318765224122466007910025242301110"]},"id":"ASB-A-517378147-ed543828"}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-11-01"}]}],"versions":["17"],"ecosystem_specific":{"spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/e59262abddec59b022a647419d16d88fe4884f2c","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["138585907356049197651595769872137111095","75177937820477983286183616850905417630","201802036799063034230217332538066756020","93299189663075145488265851673479696756"]},"id":"ASB-A-517378147-34ac9fa6","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/e59262abddec59b022a647419d16d88fe4884f2c","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java","function":"parseContentType"},"deprecated":false,"digest":{"length":1726,"function_hash":"61383290368940746329447847865964857475"},"id":"ASB-A-517378147-3868acf1","signature_type":"Function","signature_version":"v1"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/e59262abddec59b022a647419d16d88fe4884f2c"],"severity":"Critical"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}},{"package":{"name":"platform/development","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"digest":{"length":1385,"function_hash":"212162466717132089363479495165614142073"},"id":"ASB-A-517378147-392d5290","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/8ce355dfc3f822962189bc791f1550470e6b6f1c","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java","function":"parseContentType"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/development/+/8ce355dfc3f822962189bc791f1550470e6b6f1c","target":{"file":"samples/ApiDemos/src/com/example/android/mmslib/pdu/PduParser.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["121854140715205234673495553654458523330","136409478165362966666182304695714260102","50075114396528856346053782771114903730","274524318765224122466007910025242301110"]},"id":"ASB-A-517378147-662713d8"}],"fixes":["https://android.googlesource.com/platform/development/+/8ce355dfc3f822962189bc791f1550470e6b6f1c"],"severity":"Critical"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14:0"},{"fixed":"14:2026-11-01"}]}],"versions":["14"],"ecosystem_specific":{"spl":"2026-11-01","types":["DoS"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c05472df949332cfee558b2da01c2076b62789f5","target":{"file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"line_hashes":["138585907356049197651595769872137111095","75177937820477983286183616850905417630","201802036799063034230217332538066756020","93299189663075145488265851673479696756"],"threshold":0.9},"id":"ASB-A-517378147-9034a1f4","signature_type":"Line"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/c05472df949332cfee558b2da01c2076b62789f5","target":{"function":"parseContentType","file":"telephony/common/com/google/android/mms/pdu/PduParser.java"},"deprecated":false,"digest":{"length":1581,"function_hash":"128172258089473237359508295994700672622"},"id":"ASB-A-517378147-9d762292","signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/frameworks/base/+/c05472df949332cfee558b2da01c2076b62789f5"],"severity":"Critical"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-517378147.json"}}],"schema_version":"1.9.2"}