{"id":"ASB-A-522374659","details":"In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-522374659","CVE-2026-55285"],"modified":"2026-09-08T15:39:03.104189951Z","published":"2026-09-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2026-09-01"}],"affected":[{"package":{"name":"platform/hardware/nxp/secure_element","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17-next:0"},{"fixed":"17-next:2026-09-01"}]}],"versions":["17-next"],"ecosystem_specific":{"spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"102340071546147324999084177581053538936","length":4779},"id":"ASB-A-522374659-0a7bc323","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"function":"SecureElement::openLogicalChannel","file":"snxxx/1.0/SecureElement.cpp"}},{"match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"pn8x/1.1/SecureElement.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["298040209305988493396417176069156250277","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","1282493892328110378939559302739827315","212710492225642958173009452866095333179","56365922854511758064175518627038112119","16084907214793149628237049921106189301","337364569545773392637293574727388223877","293192370206391911529330338183593915371","245026834900671649695220794932741954627"]},"id":"ASB-A-522374659-135bf46a"},{"source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"snxxx/1.1/SecureElement.cpp","function":"SecureElement::openLogicalChannel"},"deprecated":false,"digest":{"length":4624,"function_hash":"39644144481769789648415011201001541481"},"id":"ASB-A-522374659-19ae0c32","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1"},{"target":{"file":"pn8x/1.0/SecureElement.cpp","function":"SecureElement::openLogicalChannel"},"deprecated":false,"digest":{"function_hash":"125073400044787702825598323293024806146","length":3533},"id":"ASB-A-522374659-48d68584","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712"},{"digest":{"function_hash":"35919262851124404467811696146379415823","length":5538},"id":"ASB-A-522374659-5386a44a","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"function":"SecureElement::openLogicalChannel","file":"snxxx/1.2/SecureElement.cpp"},"deprecated":false},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["242187433543825070798532266511695702728","279003060699684236063189463459525465862","226951848054766167938311177420207422987","27370500202632782916553589397121610654","71126832642876927451481301767721138057","51557534795302140254909532997936515469","98003052844833869824397427760655581279"]},"id":"ASB-A-522374659-54ccfca3","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"snxxx/aidl/VirtualISO.cpp"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["298040209305988493396417176069156250277","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","1282493892328110378939559302739827315","212710492225642958173009452866095333179","56365922854511758064175518627038112119","16084907214793149628237049921106189301","337364569545773392637293574727388223877","293192370206391911529330338183593915371","245026834900671649695220794932741954627"]},"id":"ASB-A-522374659-5be8b4fe","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"pn8x/1.0/SecureElement.cpp"}},{"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-7fc9479f","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"snxxx/1.0/VirtualISO.cpp"},"deprecated":false},{"signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"snxxx/1.2/VirtualISO.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-8645ecf8","match_only_versions":["17-next"],"signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"125073400044787702825598323293024806146","length":3533},"id":"ASB-A-522374659-874d3027","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"pn8x/1.1/SecureElement.cpp","function":"SecureElement::openLogicalChannel"}},{"target":{"file":"snxxx/1.0/VirtualISO.cpp","function":"VirtualISO::openLogicalChannel"},"deprecated":false,"digest":{"length":4523,"function_hash":"204011113354567100811765733950071715043"},"id":"ASB-A-522374659-9b4066b4","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712"},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"snxxx/1.1/SecureElement.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-a9c8ab88","match_only_versions":["17-next"]},{"digest":{"line_hashes":["242187433543825070798532266511695702728","279003060699684236063189463459525465862","226951848054766167938311177420207422987","27370500202632782916553589397121610654","71126832642876927451481301767721138057","51557534795302140254909532997936515469","98003052844833869824397427760655581279"],"threshold":0.9},"id":"ASB-A-522374659-abbe51ce","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"snxxx/aidl/SecureElement.cpp"},"deprecated":false},{"digest":{"function_hash":"30774933956023146560871657857133652373","length":1253},"id":"ASB-A-522374659-b2ec7c67","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"pn8x/1.0/SecureElement.cpp","function":"SecureElement::closeChannel"},"deprecated":false},{"id":"ASB-A-522374659-b57af7de","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"snxxx/1.1/VirtualISO.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"]}},{"target":{"file":"snxxx/1.0/SecureElement.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-b63f125f","match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712"},{"id":"ASB-A-522374659-d090551b","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"snxxx/1.2/VirtualISO.cpp","function":"VirtualISO::openLogicalChannel"},"deprecated":false,"digest":{"function_hash":"256895169529118761644503079709688043797","length":5019}},{"deprecated":false,"digest":{"function_hash":"204011113354567100811765733950071715043","length":4523},"id":"ASB-A-522374659-ea10c4ce","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"function":"VirtualISO::openLogicalChannel","file":"snxxx/1.1/VirtualISO.cpp"}},{"target":{"function":"SecureElement::closeChannel","file":"pn8x/1.1/SecureElement.cpp"},"deprecated":false,"digest":{"length":1259,"function_hash":"291790864932164053722404976952926976420"},"id":"ASB-A-522374659-ea688807","match_only_versions":["17-next"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712"},{"match_only_versions":["17-next"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712","target":{"file":"snxxx/1.2/SecureElement.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-eee6d2c5"}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/secure_element/+/8ca0d691fa4b34b7b60a141d5db116e153470712"],"severity":"Critical"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522374659.json"}},{"package":{"name":"platform/hardware/nxp/secure_element","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16:0"},{"fixed":"16:2026-09-01"}]}],"versions":["16"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597"],"severity":"Critical","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"digest":{"function_hash":"256895169529118761644503079709688043797","length":5019},"id":"ASB-A-522374659-0aeac328","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/1.2/VirtualISO.cpp","function":"VirtualISO::openLogicalChannel"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/1.2/VirtualISO.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"]},"id":"ASB-A-522374659-10734c3a","match_only_versions":["16"]},{"deprecated":false,"digest":{"function_hash":"35919262851124404467811696146379415823","length":5538},"id":"ASB-A-522374659-14f30cc8","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"function":"SecureElement::openLogicalChannel","file":"snxxx/1.2/SecureElement.cpp"}},{"source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/1.1/VirtualISO.cpp","function":"VirtualISO::openLogicalChannel"},"deprecated":false,"digest":{"function_hash":"204011113354567100811765733950071715043","length":4523},"id":"ASB-A-522374659-3fc9c913","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"]},"id":"ASB-A-522374659-4f3a5ebd","match_only_versions":["16"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/1.1/SecureElement.cpp"}},{"id":"ASB-A-522374659-593b8868","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"function":"SecureElement::closeChannel","file":"pn8x/1.0/SecureElement.cpp"},"deprecated":false,"digest":{"length":1253,"function_hash":"30774933956023146560871657857133652373"}},{"deprecated":false,"digest":{"length":4523,"function_hash":"204011113354567100811765733950071715043"},"id":"ASB-A-522374659-5a839111","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/1.0/VirtualISO.cpp","function":"VirtualISO::openLogicalChannel"}},{"deprecated":false,"digest":{"function_hash":"102340071546147324999084177581053538936","length":4779},"id":"ASB-A-522374659-5ae54b96","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"function":"SecureElement::openLogicalChannel","file":"snxxx/1.0/SecureElement.cpp"}},{"match_only_versions":["16"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/1.0/SecureElement.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-5cf7921c"},{"match_only_versions":["16"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"pn8x/1.0/SecureElement.cpp","function":"SecureElement::openLogicalChannel"},"deprecated":false,"digest":{"function_hash":"125073400044787702825598323293024806146","length":3533},"id":"ASB-A-522374659-6d8cedd3"},{"match_only_versions":["16"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/1.0/VirtualISO.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-73295143"},{"digest":{"function_hash":"39644144481769789648415011201001541481","length":4624},"id":"ASB-A-522374659-97f7666f","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/1.1/SecureElement.cpp","function":"SecureElement::openLogicalChannel"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["242187433543825070798532266511695702728","279003060699684236063189463459525465862","226951848054766167938311177420207422987","27370500202632782916553589397121610654","71126832642876927451481301767721138057","51557534795302140254909532997936515469","98003052844833869824397427760655581279"],"threshold":0.9},"id":"ASB-A-522374659-9dd89ab2","match_only_versions":["16"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/aidl/SecureElement.cpp"}},{"digest":{"line_hashes":["242187433543825070798532266511695702728","279003060699684236063189463459525465862","226951848054766167938311177420207422987","27370500202632782916553589397121610654","71126832642876927451481301767721138057","51557534795302140254909532997936515469","98003052844833869824397427760655581279"],"threshold":0.9},"id":"ASB-A-522374659-a11c06c5","match_only_versions":["16"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/aidl/VirtualISO.cpp"},"deprecated":false},{"target":{"file":"pn8x/1.1/SecureElement.cpp"},"deprecated":false,"digest":{"line_hashes":["298040209305988493396417176069156250277","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","1282493892328110378939559302739827315","212710492225642958173009452866095333179","56365922854511758064175518627038112119","16084907214793149628237049921106189301","337364569545773392637293574727388223877","293192370206391911529330338183593915371","245026834900671649695220794932741954627"],"threshold":0.9},"id":"ASB-A-522374659-a3368a55","match_only_versions":["16"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/1.2/SecureElement.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"]},"id":"ASB-A-522374659-a69e24aa","match_only_versions":["16"],"signature_type":"Line"},{"deprecated":false,"digest":{"line_hashes":["298040209305988493396417176069156250277","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","1282493892328110378939559302739827315","212710492225642958173009452866095333179","56365922854511758064175518627038112119","16084907214793149628237049921106189301","337364569545773392637293574727388223877","293192370206391911529330338183593915371","245026834900671649695220794932741954627"],"threshold":0.9},"id":"ASB-A-522374659-c1e8ce9f","match_only_versions":["16"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"pn8x/1.0/SecureElement.cpp"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"snxxx/1.1/VirtualISO.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"]},"id":"ASB-A-522374659-d1109502","match_only_versions":["16"],"signature_type":"Line"},{"source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"function":"SecureElement::openLogicalChannel","file":"pn8x/1.1/SecureElement.cpp"},"deprecated":false,"digest":{"length":3533,"function_hash":"125073400044787702825598323293024806146"},"id":"ASB-A-522374659-e24323a9","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"291790864932164053722404976952926976420","length":1259},"id":"ASB-A-522374659-f7bb6eb3","match_only_versions":["16"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/022ec6a09897d69fa23bc809652756b5d740b597","target":{"file":"pn8x/1.1/SecureElement.cpp","function":"SecureElement::closeChannel"},"deprecated":false}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522374659.json"}},{"package":{"name":"platform/hardware/nxp/secure_element","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"16-qpr2:0"},{"fixed":"16-qpr2:2026-09-01"}]}],"versions":["16-qpr2"],"ecosystem_specific":{"types":["EoP"],"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"pn8x/1.1/SecureElement.cpp"},"deprecated":false,"digest":{"line_hashes":["298040209305988493396417176069156250277","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","1282493892328110378939559302739827315","212710492225642958173009452866095333179","56365922854511758064175518627038112119","16084907214793149628237049921106189301","337364569545773392637293574727388223877","293192370206391911529330338183593915371","245026834900671649695220794932741954627"],"threshold":0.9},"id":"ASB-A-522374659-00ce2cb3","match_only_versions":["16-qpr2"]},{"match_only_versions":["16-qpr2"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/1.1/VirtualISO.cpp","function":"VirtualISO::openLogicalChannel"},"deprecated":false,"digest":{"function_hash":"204011113354567100811765733950071715043","length":4523},"id":"ASB-A-522374659-1bff963b"},{"source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/1.0/SecureElement.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"]},"id":"ASB-A-522374659-1e1f2925","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/1.0/SecureElement.cpp","function":"SecureElement::openLogicalChannel"},"deprecated":false,"digest":{"function_hash":"102340071546147324999084177581053538936","length":4779},"id":"ASB-A-522374659-20d77951","match_only_versions":["16-qpr2"],"signature_type":"Function"},{"match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/aidl/SecureElement.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["242187433543825070798532266511695702728","279003060699684236063189463459525465862","226951848054766167938311177420207422987","27370500202632782916553589397121610654","71126832642876927451481301767721138057","51557534795302140254909532997936515469","98003052844833869824397427760655581279"]},"id":"ASB-A-522374659-33f1192c"},{"digest":{"length":3533,"function_hash":"125073400044787702825598323293024806146"},"id":"ASB-A-522374659-502695ad","match_only_versions":["16-qpr2"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"pn8x/1.1/SecureElement.cpp","function":"SecureElement::openLogicalChannel"},"deprecated":false},{"target":{"file":"pn8x/1.1/SecureElement.cpp","function":"SecureElement::closeChannel"},"deprecated":false,"digest":{"function_hash":"291790864932164053722404976952926976420","length":1259},"id":"ASB-A-522374659-6414f6c4","match_only_versions":["16-qpr2"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e"},{"source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/1.1/SecureElement.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"]},"id":"ASB-A-522374659-6f45138f","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1"},{"id":"ASB-A-522374659-79a8ab86","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/1.0/VirtualISO.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"35919262851124404467811696146379415823","length":5538},"id":"ASB-A-522374659-83305ae9","match_only_versions":["16-qpr2"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"function":"SecureElement::openLogicalChannel","file":"snxxx/1.2/SecureElement.cpp"}},{"match_only_versions":["16-qpr2"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/1.2/VirtualISO.cpp","function":"VirtualISO::openLogicalChannel"},"deprecated":false,"digest":{"function_hash":"256895169529118761644503079709688043797","length":5019},"id":"ASB-A-522374659-9a854fc9"},{"id":"ASB-A-522374659-9f5f64f3","match_only_versions":["16-qpr2"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"function":"SecureElement::closeChannel","file":"pn8x/1.0/SecureElement.cpp"},"deprecated":false,"digest":{"function_hash":"30774933956023146560871657857133652373","length":1253}},{"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-a3c839b0","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/1.1/VirtualISO.cpp"},"deprecated":false},{"source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/1.2/SecureElement.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"]},"id":"ASB-A-522374659-ae8e600b","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/1.0/VirtualISO.cpp","function":"VirtualISO::openLogicalChannel"},"deprecated":false,"digest":{"length":4523,"function_hash":"204011113354567100811765733950071715043"},"id":"ASB-A-522374659-ba04f5b9","match_only_versions":["16-qpr2"]},{"digest":{"threshold":0.9,"line_hashes":["242187433543825070798532266511695702728","279003060699684236063189463459525465862","226951848054766167938311177420207422987","27370500202632782916553589397121610654","71126832642876927451481301767721138057","51557534795302140254909532997936515469","98003052844833869824397427760655581279"]},"id":"ASB-A-522374659-cc4ada04","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/aidl/VirtualISO.cpp"},"deprecated":false},{"target":{"function":"SecureElement::openLogicalChannel","file":"snxxx/1.1/SecureElement.cpp"},"deprecated":false,"digest":{"function_hash":"39644144481769789648415011201001541481","length":4624},"id":"ASB-A-522374659-d97d88b2","match_only_versions":["16-qpr2"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"]},"id":"ASB-A-522374659-dba33097","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"snxxx/1.2/VirtualISO.cpp"}},{"id":"ASB-A-522374659-f601c4bc","match_only_versions":["16-qpr2"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"pn8x/1.0/SecureElement.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["298040209305988493396417176069156250277","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","1282493892328110378939559302739827315","212710492225642958173009452866095333179","56365922854511758064175518627038112119","16084907214793149628237049921106189301","337364569545773392637293574727388223877","293192370206391911529330338183593915371","245026834900671649695220794932741954627"]}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e","target":{"file":"pn8x/1.0/SecureElement.cpp","function":"SecureElement::openLogicalChannel"},"deprecated":false,"digest":{"length":3533,"function_hash":"125073400044787702825598323293024806146"},"id":"ASB-A-522374659-f77e2eb0","match_only_versions":["16-qpr2"],"signature_type":"Function"}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/secure_element/+/3ca17161481cf9154167c170c87f9d124fbf495e"],"severity":"Critical","spl":"2026-09-01"},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522374659.json"}},{"package":{"name":"platform/hardware/nxp/secure_element","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17:0"},{"fixed":"17:2026-09-01"}]}],"versions":["17"],"ecosystem_specific":{"severity":"Critical","spl":"2026-09-01","types":["EoP"],"vanir_signatures":[{"match_only_versions":["17"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"pn8x/1.1/SecureElement.cpp","function":"SecureElement::closeChannel"},"deprecated":false,"digest":{"function_hash":"291790864932164053722404976952926976420","length":1259},"id":"ASB-A-522374659-04d80a50"},{"target":{"file":"snxxx/aidl/SecureElement.cpp"},"deprecated":false,"digest":{"line_hashes":["242187433543825070798532266511695702728","279003060699684236063189463459525465862","226951848054766167938311177420207422987","27370500202632782916553589397121610654","71126832642876927451481301767721138057","51557534795302140254909532997936515469","98003052844833869824397427760655581279"],"threshold":0.9},"id":"ASB-A-522374659-0bbf0a2a","match_only_versions":["17"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203"},{"id":"ASB-A-522374659-10500bda","match_only_versions":["17"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"snxxx/1.0/VirtualISO.cpp","function":"VirtualISO::openLogicalChannel"},"deprecated":false,"digest":{"length":4523,"function_hash":"204011113354567100811765733950071715043"}},{"match_only_versions":["17"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"function":"VirtualISO::openLogicalChannel","file":"snxxx/1.1/VirtualISO.cpp"},"deprecated":false,"digest":{"function_hash":"204011113354567100811765733950071715043","length":4523},"id":"ASB-A-522374659-279c74e0"},{"target":{"file":"snxxx/1.1/VirtualISO.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-285f3819","match_only_versions":["17"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203"},{"source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"snxxx/1.0/SecureElement.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-2e9a8a0d","match_only_versions":["17"],"signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"snxxx/1.2/VirtualISO.cpp","function":"VirtualISO::openLogicalChannel"},"deprecated":false,"digest":{"function_hash":"256895169529118761644503079709688043797","length":5019},"id":"ASB-A-522374659-34e8917f","match_only_versions":["17"],"signature_type":"Function","signature_version":"v1"},{"target":{"file":"snxxx/aidl/VirtualISO.cpp"},"deprecated":false,"digest":{"line_hashes":["242187433543825070798532266511695702728","279003060699684236063189463459525465862","226951848054766167938311177420207422987","27370500202632782916553589397121610654","71126832642876927451481301767721138057","51557534795302140254909532997936515469","98003052844833869824397427760655581279"],"threshold":0.9},"id":"ASB-A-522374659-53d9348d","match_only_versions":["17"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203"},{"target":{"file":"snxxx/1.1/SecureElement.cpp","function":"SecureElement::openLogicalChannel"},"deprecated":false,"digest":{"function_hash":"39644144481769789648415011201001541481","length":4624},"id":"ASB-A-522374659-5fccf156","match_only_versions":["17"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203"},{"id":"ASB-A-522374659-61420e9d","match_only_versions":["17"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"pn8x/1.0/SecureElement.cpp"},"deprecated":false,"digest":{"line_hashes":["298040209305988493396417176069156250277","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","1282493892328110378939559302739827315","212710492225642958173009452866095333179","56365922854511758064175518627038112119","16084907214793149628237049921106189301","337364569545773392637293574727388223877","293192370206391911529330338183593915371","245026834900671649695220794932741954627"],"threshold":0.9}},{"id":"ASB-A-522374659-7abcb52c","match_only_versions":["17"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"function":"SecureElement::closeChannel","file":"pn8x/1.0/SecureElement.cpp"},"deprecated":false,"digest":{"function_hash":"30774933956023146560871657857133652373","length":1253}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"snxxx/1.1/SecureElement.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-7f606fda","match_only_versions":["17"]},{"deprecated":false,"digest":{"function_hash":"102340071546147324999084177581053538936","length":4779},"id":"ASB-A-522374659-95ae5c4a","match_only_versions":["17"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"function":"SecureElement::openLogicalChannel","file":"snxxx/1.0/SecureElement.cpp"}},{"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"snxxx/1.2/SecureElement.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-9d9cfcdf","match_only_versions":["17"]},{"deprecated":false,"digest":{"function_hash":"125073400044787702825598323293024806146","length":3533},"id":"ASB-A-522374659-b6b3adf6","match_only_versions":["17"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"pn8x/1.0/SecureElement.cpp","function":"SecureElement::openLogicalChannel"}},{"id":"ASB-A-522374659-b86ed703","match_only_versions":["17"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"snxxx/1.2/SecureElement.cpp","function":"SecureElement::openLogicalChannel"},"deprecated":false,"digest":{"function_hash":"35919262851124404467811696146379415823","length":5538}},{"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9},"id":"ASB-A-522374659-cde89e31","match_only_versions":["17"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"snxxx/1.0/VirtualISO.cpp"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"125073400044787702825598323293024806146","length":3533},"id":"ASB-A-522374659-cf9bd6be","match_only_versions":["17"],"signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"pn8x/1.1/SecureElement.cpp","function":"SecureElement::openLogicalChannel"}},{"signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"pn8x/1.1/SecureElement.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["298040209305988493396417176069156250277","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","1282493892328110378939559302739827315","212710492225642958173009452866095333179","56365922854511758064175518627038112119","16084907214793149628237049921106189301","337364569545773392637293574727388223877","293192370206391911529330338183593915371","245026834900671649695220794932741954627"]},"id":"ASB-A-522374659-db519650","match_only_versions":["17"],"signature_type":"Line"},{"id":"ASB-A-522374659-f80d8a98","match_only_versions":["17"],"signature_type":"Line","signature_version":"v1","source":"https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203","target":{"file":"snxxx/1.2/VirtualISO.cpp"},"deprecated":false,"digest":{"line_hashes":["123139793932631872249038582978570930420","279003060699684236063189463459525465862","226951848054766167938311177420207422987","49671833976088324300243773300847003746","31320967547486196675621212379672805476","336138283031346677740273422743653971611","93665227367128947763833361280113149214"],"threshold":0.9}}],"fixes":["https://android.googlesource.com/platform/hardware/nxp/secure_element/+/141603afec4646784527e2a6b48aa7130defb203"]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-522374659.json"}}],"schema_version":"1.9.0"}