{"id":"ASB-A-447536200", "published":"2026-06-01T00:00:00Z", "modified":"2026-06-26T15:22:10.377767615Z", "aliases":["CVE-2026-0059", "A-447536200"], "details":"In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/packages/modules/Bluetooth", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-06-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a"], "severity":"High", "spl":"2026-06-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"228124477976245695124745732923622025023", "length":2673}, "id":"ASB-A-447536200-05898a51", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"process_service_attr_rsp"}}, {"deprecated":false, "digest":{"function_hash":"333724087067145912869271161799429386418", "length":185}, "id":"ASB-A-447536200-1cdbb47c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_is_base_uuid"}}, {"deprecated":false, "digest":{"function_hash":"81482547451265556306424903678459766129", "length":341}, "id":"ASB-A-447536200-20649856", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_clear_all_ccbs_for_cid"}}, {"deprecated":false, "digest":{"function_hash":"65679401819610885128879197593996558186", "length":682}, "id":"ASB-A-447536200-2468246e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_build_attrib_seq"}}, {"deprecated":false, "digest":{"function_hash":"150730886917213782520724660801541534010", "length":521}, "id":"ASB-A-447536200-3298115a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_get_attrib_seq_len"}}, {"deprecated":false, "digest":{"function_hash":"1006278776863331260199144266564773463", "length":429}, "id":"ASB-A-447536200-3a246f1b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_process_pend_ccb_same_cid"}}, {"deprecated":false, "digest":{"function_hash":"78343784564162593110955058439191107236", "length":740}, "id":"ASB-A-447536200-4002adf9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_process_pend_ccb_new_cid"}}, {"deprecated":false, "digest":{"function_hash":"319676069720130263146922114782178272468", "length":1496}, "id":"ASB-A-447536200-47d64fbf", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"sdp_snd_service_search_req"}}, {"deprecated":false, "digest":{"function_hash":"279338205253987393261141600593878522533", "length":465}, "id":"ASB-A-447536200-517de2f7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_get_active_ccb_cid"}}, {"deprecated":false, "digest":{"function_hash":"200039696306405254345323423075009536239", "length":3642}, "id":"ASB-A-447536200-57755f41", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"process_service_search_attr_rsp"}}, {"deprecated":false, "digest":{"line_hashes":["326370735855782173290088333519199024501", "23775190123876185367952224390436993630", "214008033334314886152430659070161006070", "19158865299871508974583687411596965783", "108404385497647739189959524256453112757", "304463337081961149951185785977887023747", "90154277084635067974258224429291730575", "274969701243507201424821078372926604986", "278365189175265788358718205491501046780", "231084207802152130568933406874529808348", "221859579320574027536831881722138168489", "144313513534590638134725235298719246491", "32543603161677176855104810085841475209", "26754928882030398912622750934244099367", "157294517388950836013497118318277650405", "48185019849494187661612053535622932786", "167521774277652692342849343101078533110", "276756990864081341744246601161355618197", "74273699812742365430141261706142631460", "34647836671808944544916338826853468026", "334324837258436036672063254752341890796", "46307960329306334866436444378705138076", "179749108502613592247648680954611298347", "236251186616068309474544052909372766471", "119246952202329294236808126097919144893", "139224628970119815935533933945979508547", "91013505136131953619925512187470977113", "49883370931429588927880830416878931236", "70877147429192502848043836931041021146", "306998342490107075672154028662122706074", "252601170005359041027288205100501752322", "67078385489255641139962012911637787104", "52529972395341481296516571846908603738", "154229003422302414995266222010052262995", "306269228552719857307932085848829441729", "185185180429629931402327951989947970450", "304360568698892400282016347847436309157", "112132681103412679542392778145806142316", "168361769482275271245464666724613642538", "212811995986721383140016008002199073860", "309311720268083120908592299428973346565", "316560629611697645921225785457231240235", "233257058859039914057226832547395699501", "12599416583967498031884446909047241290", "21756245403317452600140451063624359492", "32288059406285717573537828019028935314", "311448689938422014763309863834569663926", "193930503312197903953190909580389544862", "306269228552719857307932085848829441729", "185185180429629931402327951989947970450", "99199587304693493220773868781022884981", "12064174143542204562024668115732699549", "313187825757134591379171286585886808814", "327215228318906691143183335563639566379", "79272656834164451933794474062533160745", "178544324326528763576308132597231427274", "256935188940384320821465600702650672030", "326631676306538573570444043739411462570", "137425355368622959117415691134457687761", "264189053794117285838469680204300536083", "154577415408098892618715483155904229563", "102816232909661194573612923711765279610", "217559866803613539181936902618958470861", "201231236171259407064836701161991166312", "108631665475905534738327248248822642075", "51445223963378330972303350929557905991", "199453958352446924736154211746824617573", "82968710789178680278744926141136139424", "108712289331515478568327924746544825520", "89376339245645909852432352248151532356", "169672469906830227547459443234812288195", "197657977485633135660875508687874485253", "187450595241006105693429992055939501030", "259763838707751556659522844238805527769", "225298182088182573997019063648279313760", "141751588404925206638793119708321271300", "16354430546490706990457278431273215788", "38433798499403747781527309899318996623", "178895073226500160457343647740838484659", "90349375008200988480856512099154006686", "194646932120628440495656481768784140803", "246326683515591731197641092874218477180", "155872781830939399377585313960684436835", "312480222250217645006778648212679949130", "314543507040991882890378359474810089450", "235948113649741128556398669173371333425", "164483634386077128027241956451505197708", "183189645098710955767238707651902810425", "50478338057853078796698474751733576499"], "threshold":0.9}, "id":"ASB-A-447536200-6dbd3e08", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc"}}, {"deprecated":false, "digest":{"function_hash":"80754606558893926492832094027308066581", "length":336}, "id":"ASB-A-447536200-706f9020", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_find_ccb_by_cid"}}, {"deprecated":false, "digest":{"function_hash":"214643982189623892415196064866639173907", "length":324}, "id":"ASB-A-447536200-75c38d74", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_dump_all_ccb"}}, {"deprecated":false, "digest":{"function_hash":"80933393125222945169276068956322292293", "length":420}, "id":"ASB-A-447536200-96dad96a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_clear_pend_ccb"}}, {"deprecated":false, "digest":{"function_hash":"111669523368200778989000892464108701398", "length":300}, "id":"ASB-A-447536200-cc255ba8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_find_ccb_by_db"}}, {"deprecated":false, "digest":{"function_hash":"54787946774131276834997011142070032338", "length":322}, "id":"ASB-A-447536200-e20e0857", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_allocate_ccb"}}, {"deprecated":false, "digest":{"line_hashes":["171078056534141121881746231170084347661", "170947527587775249395543101524768367324", "258573597564683953108495265542610645476", "328736490807440130119498483174093372464"], "threshold":0.9}, "id":"ASB-A-447536200-ef1f0a28", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdpint.h"}}, {"deprecated":false, "digest":{"line_hashes":["245274500916817765685026299223726931501", "261107640071343295284311259762648782367", "280871192533331872490680348279995469507", "159758736012175431084880502847943668461", "312665254395866983748225937565226607594", "155553672837112500187961424711653847152", "183658112776456884982317791669428260512", "245274500916817765685026299223726931501", "239216014942955512543650145673427277677", "37095494119066417819874032828651970831", "193361253108039010474392589263493625407", "131547622748974736285629891326986368741", "143033073766739784571993086891917467312", "284770161684915356956004941730926158323", "305616741311290478236511749051214208940", "76985485075227398684660142720497034879", "65954147434926373067775428596254591438", "51778380885260079002472106207060386654", "298845928710937452972966093599563997059", "287725367748858497641260553031501012666", "276576309933893761289846244921743107883", "152922577545610054467656687284007472864", "304295685645017222468866694584391935067", "32260036647202101542321266565207101459", "195062101594314683239219202772270039101", "280650560292466829771637302790996489161", "291243410863650913579494073112024021213", "305616741311290478236511749051214208940", "76985485075227398684660142720497034879", "65954147434926373067775428596254591438", "60835984753162607771912530381849305263", "202071630383348982842554994678484635834"], "threshold":0.9}, "id":"ASB-A-447536200-fca56305", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/ce1de9ef78ca4ff7b408d934815a8967e390eb6a", "target":{"file":"system/stack/sdp/sdp_discovery.cc"}}]}}, {"package":{"name":"platform/packages/modules/Bluetooth", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-06-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535"], "severity":"High", "spl":"2026-06-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"316212770131371436286519623397336237357", "length":372}, "id":"ASB-A-447536200-2e699930", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_clear_pend_ccb"}}, {"deprecated":false, "digest":{"function_hash":"265068443550774229780860342413028575553", "length":625}, "id":"ASB-A-447536200-3b23362a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_process_pend_ccb_new_cid"}}, {"deprecated":false, "digest":{"line_hashes":["183658112776456884982317791669428260512", "245274500916817765685026299223726931501", "261107640071343295284311259762648782367", "107432523268821900211035860330276751102", "159758736012175431084880502847943668461", "312665254395866983748225937565226607594", "183658112776456884982317791669428260512", "245274500916817765685026299223726931501", "239216014942955512543650145673427277677", "171190651436066523382397299537867725127", "193361253108039010474392589263493625407", "44259014220124156151158169539784005727", "83615662073872901412605072790669479592", "332603156978438045215459941919583329411", "390938992300505522195875478186405772", "209092327733482572776398202651444387212", "1007792411899903657847015103372108454", "215784879440283593456859045336608473736", "265917009288791384330916886080142152618", "287725367748858497641260553031501012666", "276576309933893761289846244921743107883", "152922577545610054467656687284007472864", "304295685645017222468866694584391935067", "32260036647202101542321266565207101459", "195062101594314683239219202772270039101", "140943815529429886940162158830286155510", "332603156978438045215459941919583329411", "390938992300505522195875478186405772", "209092327733482572776398202651444387212", "240050482495480845480262458032094524268", "68314242089519690823758425391443762558", "314957757806087263563056318967461454051"], "threshold":0.9}, "id":"ASB-A-447536200-580234d4", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_discovery.cc"}}, {"deprecated":false, "digest":{"line_hashes":["245975806998326282897736415136276715524", "227635983820497233123737089326974992700", "333298292523052068529268180816754694612", "136551380523486633017351997876088482372"], "threshold":0.9}, "id":"ASB-A-447536200-5bfebd1a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdpint.h"}}, {"deprecated":false, "digest":{"function_hash":"208546097822161473594154319925646749696", "length":185}, "id":"ASB-A-447536200-7a305ba3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_is_base_uuid"}}, {"deprecated":false, "digest":{"line_hashes":["326370735855782173290088333519199024501", "168484737811878346476233804207844102802", "209855550805138250423092381834766273225", "270635274930716844049003356273687678094", "35436834977655841040790079453909089138", "220760902501378382155048574824173680689", "115514079460509737281765431370265493595", "264567184784687710178383146007433450256", "187612247867437204207291813035662472450", "244534874859023549461483857930705054685", "236860252472128135954545952216777379271", "314347501146288078239009769938107745555", "335635115093336676414886775784852034944", "305409964575734714147609171868653136022", "216753756236515197432872685449490267809", "72923339473680657477029268661882284535", "12388186395672872938962820315297379170", "294325273084886363883312843215450402740", "27877949440982926145266306272050375863", "306236976359628743469644493118247518520", "114552253490572829054692528441112407866", "324150545003371972269092317629291655842", "82940527776583746352715246972010390065", "188939913193119186317185389500148929266", "299980396087160819537571327673927603649", "248540149873802503755277051623794251175", "199807422108682321122217058621257728022", "11625168764582711805871222798910270171", "230224199089253317929709415374938866428", "311804297712642271149551374327002463786", "136322865108038674428021675166742603321", "217004413781050003220444925721375424194", "99907716076257563476849358806210622176", "157066826348609771402794977173593848574", "162937564018798944678715653955007552850", "328947380536869477407505614412193768967", "215089919965880416929432952714073707934", "245720050566093072363892831534780966362", "136322865108038674428021675166742603321", "243025138387903154865409534615720559931", "193515975318773987868370188795133729651", "129606122677402709963051695211538735221", "230224199089253317929709415374938866428", "311804297712642271149551374327002463786", "136322865108038674428021675166742603321", "178471867417679587374181406900292538190", "78240578126920771397608582533241210579", "10021676309050580608348405789842091724", "97340881592337826414141165792030715775", "316541200221134718438491709068700218407", "152820968930503425259694623337199103001", "6183317276182603485105702155572644745", "47583654619010511337980586558146490640", "67028234233707455533253824454951475441", "287659366736639719616329542557909764796", "75227255106732586204217689819467596758", "68708104641908612620073674231858830650", "121739399516288288285404311758313045303", "176667335615767700481509840876035817237", "139384029423412105122811606899191639880", "295976341110895970466300820547144591938", "187450595241006105693429992055939501030", "259763838707751556659522844238805527769", "225298182088182573997019063648279313760", "141751588404925206638793119708321271300", "16354430546490706990457278431273215788", "117367199946443104980179049542708737775", "103430217550062819751943427571824005012", "113306698009149581613564880102064838492", "172711697904102539492773343677023438809", "290609846976860001417399293487738666528", "179477199284833202379375428347980354786", "312480222250217645006778648212679949130", "314543507040991882890378359474810089450", "235948113649741128556398669173371333425", "164483634386077128027241956451505197708", "183189645098710955767238707651902810425", "50478338057853078796698474751733576499"], "threshold":0.9}, "id":"ASB-A-447536200-7b2d3900", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_utils.cc"}}, {"deprecated":false, "digest":{"function_hash":"161396794554933336749352277169402152545", "length":318}, "id":"ASB-A-447536200-7c073fbf", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_find_ccb_by_cid"}}, {"deprecated":false, "digest":{"function_hash":"135891749664453553410849230616205028341", "length":3528}, "id":"ASB-A-447536200-85628514", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"process_service_search_attr_rsp"}}, {"deprecated":false, "digest":{"function_hash":"321253627777962018752892434377834609709", "length":284}, "id":"ASB-A-447536200-8cb6f0f3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_find_ccb_by_db"}}, {"deprecated":false, "digest":{"function_hash":"294350224971533841332535454650550480264", "length":678}, "id":"ASB-A-447536200-a425e0c2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_build_attrib_seq"}}, {"deprecated":false, "digest":{"function_hash":"51906606051393105916285679985183477357", "length":392}, "id":"ASB-A-447536200-b84a7481", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_process_pend_ccb_same_cid"}}, {"deprecated":false, "digest":{"function_hash":"147894309073835760763737170124141275467", "length":2543}, "id":"ASB-A-447536200-b9e2fd9f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"process_service_attr_rsp"}}, {"deprecated":false, "digest":{"function_hash":"73857224782077910049613307889255999820", "length":1357}, "id":"ASB-A-447536200-bcac08a1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"sdp_snd_service_search_req"}}, {"deprecated":false, "digest":{"function_hash":"185248776116333911992658732841792976773", "length":306}, "id":"ASB-A-447536200-cefd9b54", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_allocate_ccb"}}, {"deprecated":false, "digest":{"function_hash":"16144016054025343443327941460178366551", "length":513}, "id":"ASB-A-447536200-de711d85", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_get_attrib_seq_len"}}, {"deprecated":false, "digest":{"function_hash":"268203369504127249340521470771014775229", "length":428}, "id":"ASB-A-447536200-f6c451b2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/af3196b8ac375e6c2c1f04e314eb456925b61535", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_get_active_ccb_cid"}}]}}, {"package":{"name":"platform/packages/modules/Bluetooth", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-06-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765"], "severity":"High", "spl":"2026-06-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"54787946774131276834997011142070032338", "length":322}, "id":"ASB-A-447536200-01221c2b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_allocate_ccb"}}, {"deprecated":false, "digest":{"line_hashes":["171078056534141121881746231170084347661", "170947527587775249395543101524768367324", "258573597564683953108495265542610645476", "328736490807440130119498483174093372464"], "threshold":0.9}, "id":"ASB-A-447536200-02a2e14b", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdpint.h"}}, {"deprecated":false, "digest":{"function_hash":"80933393125222945169276068956322292293", "length":420}, "id":"ASB-A-447536200-1f232d1b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_clear_pend_ccb"}}, {"deprecated":false, "digest":{"line_hashes":["245274500916817765685026299223726931501", "261107640071343295284311259762648782367", "280871192533331872490680348279995469507", "159758736012175431084880502847943668461", "312665254395866983748225937565226607594", "155553672837112500187961424711653847152", "183658112776456884982317791669428260512", "245274500916817765685026299223726931501", "239216014942955512543650145673427277677", "37095494119066417819874032828651970831", "193361253108039010474392589263493625407", "131547622748974736285629891326986368741", "278236368816588612270418516681587099013", "284770161684915356956004941730926158323", "305616741311290478236511749051214208940", "76985485075227398684660142720497034879", "65954147434926373067775428596254591438", "51778380885260079002472106207060386654", "298845928710937452972966093599563997059", "287725367748858497641260553031501012666", "276576309933893761289846244921743107883", "152922577545610054467656687284007472864", "304295685645017222468866694584391935067", "32260036647202101542321266565207101459", "195062101594314683239219202772270039101", "280650560292466829771637302790996489161", "291243410863650913579494073112024021213", "305616741311290478236511749051214208940", "76985485075227398684660142720497034879", "65954147434926373067775428596254591438", "60835984753162607771912530381849305263", "202071630383348982842554994678484635834"], "threshold":0.9}, "id":"ASB-A-447536200-2722c5b0", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_discovery.cc"}}, {"deprecated":false, "digest":{"function_hash":"241885653638003086859494901313903625041", "length":3604}, "id":"ASB-A-447536200-3deb900a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"process_service_search_attr_rsp"}}, {"deprecated":false, "digest":{"function_hash":"78343784564162593110955058439191107236", "length":740}, "id":"ASB-A-447536200-426e7843", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_process_pend_ccb_new_cid"}}, {"deprecated":false, "digest":{"function_hash":"333724087067145912869271161799429386418", "length":185}, "id":"ASB-A-447536200-43acb9de", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_is_base_uuid"}}, {"deprecated":false, "digest":{"function_hash":"65679401819610885128879197593996558186", "length":682}, "id":"ASB-A-447536200-5b53f231", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_build_attrib_seq"}}, {"deprecated":false, "digest":{"line_hashes":["326370735855782173290088333519199024501", "23775190123876185367952224390436993630", "214008033334314886152430659070161006070", "19158865299871508974583687411596965783", "108404385497647739189959524256453112757", "304463337081961149951185785977887023747", "90154277084635067974258224429291730575", "274969701243507201424821078372926604986", "278365189175265788358718205491501046780", "231084207802152130568933406874529808348", "221859579320574027536831881722138168489", "144313513534590638134725235298719246491", "32543603161677176855104810085841475209", "26754928882030398912622750934244099367", "157294517388950836013497118318277650405", "48185019849494187661612053535622932786", "167521774277652692342849343101078533110", "276756990864081341744246601161355618197", "74273699812742365430141261706142631460", "34647836671808944544916338826853468026", "334324837258436036672063254752341890796", "46307960329306334866436444378705138076", "179749108502613592247648680954611298347", "236251186616068309474544052909372766471", "119246952202329294236808126097919144893", "139224628970119815935533933945979508547", "91013505136131953619925512187470977113", "49883370931429588927880830416878931236", "70877147429192502848043836931041021146", "306998342490107075672154028662122706074", "252601170005359041027288205100501752322", "67078385489255641139962012911637787104", "52529972395341481296516571846908603738", "154229003422302414995266222010052262995", "306269228552719857307932085848829441729", "185185180429629931402327951989947970450", "304360568698892400282016347847436309157", "112132681103412679542392778145806142316", "168361769482275271245464666724613642538", "212811995986721383140016008002199073860", "309311720268083120908592299428973346565", "316560629611697645921225785457231240235", "233257058859039914057226832547395699501", "12599416583967498031884446909047241290", "21756245403317452600140451063624359492", "32288059406285717573537828019028935314", "311448689938422014763309863834569663926", "193930503312197903953190909580389544862", "306269228552719857307932085848829441729", "185185180429629931402327951989947970450", "99199587304693493220773868781022884981", "326631676306538573570444043739411462570", "137425355368622959117415691134457687761", "264189053794117285838469680204300536083", "154577415408098892618715483155904229563", "102816232909661194573612923711765279610", "217559866803613539181936902618958470861", "201231236171259407064836701161991166312", "108631665475905534738327248248822642075", "51445223963378330972303350929557905991", "199453958352446924736154211746824617573", "82968710789178680278744926141136139424", "108712289331515478568327924746544825520", "89376339245645909852432352248151532356", "169672469906830227547459443234812288195", "197657977485633135660875508687874485253", "187450595241006105693429992055939501030", "259763838707751556659522844238805527769", "225298182088182573997019063648279313760", "141751588404925206638793119708321271300", "16354430546490706990457278431273215788", "38433798499403747781527309899318996623", "178895073226500160457343647740838484659", "90349375008200988480856512099154006686", "194646932120628440495656481768784140803", "246326683515591731197641092874218477180", "155872781830939399377585313960684436835", "312480222250217645006778648212679949130", "314543507040991882890378359474810089450", "235948113649741128556398669173371333425", "164483634386077128027241956451505197708", "183189645098710955767238707651902810425", "50478338057853078796698474751733576499"], "threshold":0.9}, "id":"ASB-A-447536200-5f607313", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc"}}, {"deprecated":false, "digest":{"function_hash":"1006278776863331260199144266564773463", "length":429}, "id":"ASB-A-447536200-5f90a9ce", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_process_pend_ccb_same_cid"}}, {"deprecated":false, "digest":{"function_hash":"111669523368200778989000892464108701398", "length":300}, "id":"ASB-A-447536200-88cbf484", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_find_ccb_by_db"}}, {"deprecated":false, "digest":{"function_hash":"319676069720130263146922114782178272468", "length":1496}, "id":"ASB-A-447536200-903d3874", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"sdp_snd_service_search_req"}}, {"deprecated":false, "digest":{"function_hash":"80754606558893926492832094027308066581", "length":336}, "id":"ASB-A-447536200-9ab24f34", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_find_ccb_by_cid"}}, {"deprecated":false, "digest":{"function_hash":"228124477976245695124745732923622025023", "length":2673}, "id":"ASB-A-447536200-aa6bd2bd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"process_service_attr_rsp"}}, {"deprecated":false, "digest":{"function_hash":"214643982189623892415196064866639173907", "length":324}, "id":"ASB-A-447536200-be6b64c9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_dump_all_ccb"}}, {"deprecated":false, "digest":{"function_hash":"279338205253987393261141600593878522533", "length":465}, "id":"ASB-A-447536200-cb0c373a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_get_active_ccb_cid"}}, {"deprecated":false, "digest":{"function_hash":"150730886917213782520724660801541534010", "length":521}, "id":"ASB-A-447536200-d703522e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/d0b636f59cc176ec4f565ee52c07f7a55f6d9765", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_get_attrib_seq_len"}}]}}, {"package":{"name":"platform/packages/modules/Bluetooth", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-06-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0"], "severity":"High", "spl":"2026-06-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"80933393125222945169276068956322292293", "length":420}, "id":"ASB-A-447536200-07602cff", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_clear_pend_ccb"}}, {"deprecated":false, "digest":{"function_hash":"54787946774131276834997011142070032338", "length":322}, "id":"ASB-A-447536200-2414d0ac", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_allocate_ccb"}}, {"deprecated":false, "digest":{"function_hash":"80754606558893926492832094027308066581", "length":336}, "id":"ASB-A-447536200-256a91c7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_find_ccb_by_cid"}}, {"deprecated":false, "digest":{"function_hash":"319676069720130263146922114782178272468", "length":1496}, "id":"ASB-A-447536200-2abb71bf", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"sdp_snd_service_search_req"}}, {"deprecated":false, "digest":{"function_hash":"78343784564162593110955058439191107236", "length":740}, "id":"ASB-A-447536200-2d491f1e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_process_pend_ccb_new_cid"}}, {"deprecated":false, "digest":{"function_hash":"1006278776863331260199144266564773463", "length":429}, "id":"ASB-A-447536200-4d16753d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_process_pend_ccb_same_cid"}}, {"deprecated":false, "digest":{"function_hash":"81482547451265556306424903678459766129", "length":341}, "id":"ASB-A-447536200-5ef28fbc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_clear_all_ccbs_for_cid"}}, {"deprecated":false, "digest":{"function_hash":"279338205253987393261141600593878522533", "length":465}, "id":"ASB-A-447536200-67b44505", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_get_active_ccb_cid"}}, {"deprecated":false, "digest":{"line_hashes":["245274500916817765685026299223726931501", "261107640071343295284311259762648782367", "280871192533331872490680348279995469507", "159758736012175431084880502847943668461", "312665254395866983748225937565226607594", "155553672837112500187961424711653847152", "183658112776456884982317791669428260512", "245274500916817765685026299223726931501", "239216014942955512543650145673427277677", "37095494119066417819874032828651970831", "193361253108039010474392589263493625407", "131547622748974736285629891326986368741", "143033073766739784571993086891917467312", "284770161684915356956004941730926158323", "305616741311290478236511749051214208940", "76985485075227398684660142720497034879", "65954147434926373067775428596254591438", "51778380885260079002472106207060386654", "298845928710937452972966093599563997059", "287725367748858497641260553031501012666", "276576309933893761289846244921743107883", "152922577545610054467656687284007472864", "304295685645017222468866694584391935067", "32260036647202101542321266565207101459", "195062101594314683239219202772270039101", "280650560292466829771637302790996489161", "291243410863650913579494073112024021213", "305616741311290478236511749051214208940", "76985485075227398684660142720497034879", "65954147434926373067775428596254591438", "60835984753162607771912530381849305263", "202071630383348982842554994678484635834"], "threshold":0.9}, "id":"ASB-A-447536200-6c7bfe88", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_discovery.cc"}}, {"deprecated":false, "digest":{"function_hash":"65679401819610885128879197593996558186", "length":682}, "id":"ASB-A-447536200-80d7c93a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_build_attrib_seq"}}, {"deprecated":false, "digest":{"line_hashes":["171078056534141121881746231170084347661", "170947527587775249395543101524768367324", "258573597564683953108495265542610645476", "328736490807440130119498483174093372464"], "threshold":0.9}, "id":"ASB-A-447536200-8b309539", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdpint.h"}}, {"deprecated":false, "digest":{"function_hash":"333724087067145912869271161799429386418", "length":185}, "id":"ASB-A-447536200-9f6c7dfe", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_is_base_uuid"}}, {"deprecated":false, "digest":{"function_hash":"214643982189623892415196064866639173907", "length":324}, "id":"ASB-A-447536200-ae55985d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_dump_all_ccb"}}, {"deprecated":false, "digest":{"function_hash":"200039696306405254345323423075009536239", "length":3642}, "id":"ASB-A-447536200-b574b561", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"process_service_search_attr_rsp"}}, {"deprecated":false, "digest":{"line_hashes":["326370735855782173290088333519199024501", "23775190123876185367952224390436993630", "214008033334314886152430659070161006070", "19158865299871508974583687411596965783", "108404385497647739189959524256453112757", "304463337081961149951185785977887023747", "90154277084635067974258224429291730575", "274969701243507201424821078372926604986", "278365189175265788358718205491501046780", "231084207802152130568933406874529808348", "221859579320574027536831881722138168489", "144313513534590638134725235298719246491", "32543603161677176855104810085841475209", "26754928882030398912622750934244099367", "157294517388950836013497118318277650405", "48185019849494187661612053535622932786", "167521774277652692342849343101078533110", "276756990864081341744246601161355618197", "74273699812742365430141261706142631460", "34647836671808944544916338826853468026", "334324837258436036672063254752341890796", "46307960329306334866436444378705138076", "179749108502613592247648680954611298347", "236251186616068309474544052909372766471", "119246952202329294236808126097919144893", "139224628970119815935533933945979508547", "91013505136131953619925512187470977113", "49883370931429588927880830416878931236", "70877147429192502848043836931041021146", "306998342490107075672154028662122706074", "252601170005359041027288205100501752322", "67078385489255641139962012911637787104", "52529972395341481296516571846908603738", "154229003422302414995266222010052262995", "306269228552719857307932085848829441729", "185185180429629931402327951989947970450", "304360568698892400282016347847436309157", "112132681103412679542392778145806142316", "168361769482275271245464666724613642538", "212811995986721383140016008002199073860", "309311720268083120908592299428973346565", "316560629611697645921225785457231240235", "233257058859039914057226832547395699501", "12599416583967498031884446909047241290", "21756245403317452600140451063624359492", "32288059406285717573537828019028935314", "311448689938422014763309863834569663926", "193930503312197903953190909580389544862", "306269228552719857307932085848829441729", "185185180429629931402327951989947970450", "99199587304693493220773868781022884981", "12064174143542204562024668115732699549", "313187825757134591379171286585886808814", "327215228318906691143183335563639566379", "79272656834164451933794474062533160745", "178544324326528763576308132597231427274", "256935188940384320821465600702650672030", "326631676306538573570444043739411462570", "137425355368622959117415691134457687761", "264189053794117285838469680204300536083", "154577415408098892618715483155904229563", "102816232909661194573612923711765279610", "217559866803613539181936902618958470861", "201231236171259407064836701161991166312", "108631665475905534738327248248822642075", "51445223963378330972303350929557905991", "199453958352446924736154211746824617573", "82968710789178680278744926141136139424", "108712289331515478568327924746544825520", "89376339245645909852432352248151532356", "169672469906830227547459443234812288195", "197657977485633135660875508687874485253", "187450595241006105693429992055939501030", "259763838707751556659522844238805527769", "225298182088182573997019063648279313760", "141751588404925206638793119708321271300", "16354430546490706990457278431273215788", "38433798499403747781527309899318996623", "178895073226500160457343647740838484659", "90349375008200988480856512099154006686", "194646932120628440495656481768784140803", "246326683515591731197641092874218477180", "155872781830939399377585313960684436835", "312480222250217645006778648212679949130", "314543507040991882890378359474810089450", "235948113649741128556398669173371333425", "164483634386077128027241956451505197708", "183189645098710955767238707651902810425", "50478338057853078796698474751733576499"], "threshold":0.9}, "id":"ASB-A-447536200-b9d6cb6a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc"}}, {"deprecated":false, "digest":{"function_hash":"228124477976245695124745732923622025023", "length":2673}, "id":"ASB-A-447536200-c542ffa3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"process_service_attr_rsp"}}, {"deprecated":false, "digest":{"function_hash":"150730886917213782520724660801541534010", "length":521}, "id":"ASB-A-447536200-d904fee8", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_get_attrib_seq_len"}}, {"deprecated":false, "digest":{"function_hash":"111669523368200778989000892464108701398", "length":300}, "id":"ASB-A-447536200-e51206e3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/26185859d969eccd062fdcd82e97a8b63e7244f0", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_find_ccb_by_db"}}]}}, {"package":{"name":"platform/packages/modules/Bluetooth", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-06-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5"], "severity":"High", "spl":"2026-06-01", "types":["RCE"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"268203369504127249340521470771014775229", "length":428}, "id":"ASB-A-447536200-0f2000f3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_get_active_ccb_cid"}}, {"deprecated":false, "digest":{"function_hash":"51906606051393105916285679985183477357", "length":392}, "id":"ASB-A-447536200-33aef207", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_process_pend_ccb_same_cid"}}, {"deprecated":false, "digest":{"function_hash":"321253627777962018752892434377834609709", "length":284}, "id":"ASB-A-447536200-3a506856", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_find_ccb_by_db"}}, {"deprecated":false, "digest":{"function_hash":"294350224971533841332535454650550480264", "length":678}, "id":"ASB-A-447536200-40db2f60", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_build_attrib_seq"}}, {"deprecated":false, "digest":{"function_hash":"208546097822161473594154319925646749696", "length":185}, "id":"ASB-A-447536200-5229901c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_is_base_uuid"}}, {"deprecated":false, "digest":{"function_hash":"316212770131371436286519623397336237357", "length":372}, "id":"ASB-A-447536200-6e9efd5b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_clear_pend_ccb"}}, {"deprecated":false, "digest":{"function_hash":"185511266961220871417896236587016407159", "length":1196}, "id":"ASB-A-447536200-7d467f85", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"sdp_snd_service_search_req"}}, {"deprecated":false, "digest":{"function_hash":"265068443550774229780860342413028575553", "length":625}, "id":"ASB-A-447536200-95595d1b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_process_pend_ccb_new_cid"}}, {"deprecated":false, "digest":{"function_hash":"137824660385644395807534434788393530333", "length":3352}, "id":"ASB-A-447536200-a8f92035", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"process_service_search_attr_rsp"}}, {"deprecated":false, "digest":{"function_hash":"283483212780402653971868260915573482889", "length":2375}, "id":"ASB-A-447536200-b170d237", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_discovery.cc", "function":"process_service_attr_rsp"}}, {"deprecated":false, "digest":{"line_hashes":["326370735855782173290088333519199024501", "168484737811878346476233804207844102802", "209855550805138250423092381834766273225", "270635274930716844049003356273687678094", "35436834977655841040790079453909089138", "220760902501378382155048574824173680689", "115514079460509737281765431370265493595", "264567184784687710178383146007433450256", "187612247867437204207291813035662472450", "244534874859023549461483857930705054685", "236860252472128135954545952216777379271", "314347501146288078239009769938107745555", "335635115093336676414886775784852034944", "305409964575734714147609171868653136022", "216753756236515197432872685449490267809", "72923339473680657477029268661882284535", "12388186395672872938962820315297379170", "294325273084886363883312843215450402740", "288009977742297230995318154240597858412", "318916258940453183509867537111764787343", "334578430779693349322848087524705004496", "253810660964793155643776332215935440335", "82940527776583746352715246972010390065", "188939913193119186317185389500148929266", "299980396087160819537571327673927603649", "248540149873802503755277051623794251175", "199807422108682321122217058621257728022", "11625168764582711805871222798910270171", "230224199089253317929709415374938866428", "311804297712642271149551374327002463786", "136322865108038674428021675166742603321", "217004413781050003220444925721375424194", "99907716076257563476849358806210622176", "157066826348609771402794977173593848574", "162937564018798944678715653955007552850", "328947380536869477407505614412193768967", "215089919965880416929432952714073707934", "245720050566093072363892831534780966362", "136322865108038674428021675166742603321", "243025138387903154865409534615720559931", "193515975318773987868370188795133729651", "129606122677402709963051695211538735221", "230224199089253317929709415374938866428", "311804297712642271149551374327002463786", "136322865108038674428021675166742603321", "178471867417679587374181406900292538190", "78240578126920771397608582533241210579", "10021676309050580608348405789842091724", "97340881592337826414141165792030715775", "316541200221134718438491709068700218407", "152820968930503425259694623337199103001", "6183317276182603485105702155572644745", "47583654619010511337980586558146490640", "67028234233707455533253824454951475441", "287659366736639719616329542557909764796", "75227255106732586204217689819467596758", "68708104641908612620073674231858830650", "121739399516288288285404311758313045303", "176667335615767700481509840876035817237", "139384029423412105122811606899191639880", "295976341110895970466300820547144591938", "187450595241006105693429992055939501030", "259763838707751556659522844238805527769", "225298182088182573997019063648279313760", "141751588404925206638793119708321271300", "16354430546490706990457278431273215788", "117367199946443104980179049542708737775", "103430217550062819751943427571824005012", "113306698009149581613564880102064838492", "172711697904102539492773343677023438809", "290609846976860001417399293487738666528", "179477199284833202379375428347980354786", "312480222250217645006778648212679949130", "314543507040991882890378359474810089450", "235948113649741128556398669173371333425", "164483634386077128027241956451505197708", "183189645098710955767238707651902810425", "50478338057853078796698474751733576499"], "threshold":0.9}, "id":"ASB-A-447536200-b2498fdf", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_utils.cc"}}, {"deprecated":false, "digest":{"line_hashes":["245975806998326282897736415136276715524", "227635983820497233123737089326974992700", "333298292523052068529268180816754694612", "136551380523486633017351997876088482372"], "threshold":0.9}, "id":"ASB-A-447536200-c9e43520", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdpint.h"}}, {"deprecated":false, "digest":{"function_hash":"163357353377803991905001215573021738773", "length":334}, "id":"ASB-A-447536200-ddbc3104", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_allocate_ccb"}}, {"deprecated":false, "digest":{"function_hash":"161396794554933336749352277169402152545", "length":318}, "id":"ASB-A-447536200-e88cbdbd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_find_ccb_by_cid"}}, {"deprecated":false, "digest":{"line_hashes":["183658112776456884982317791669428260512", "245274500916817765685026299223726931501", "261107640071343295284311259762648782367", "107432523268821900211035860330276751102", "159758736012175431084880502847943668461", "312665254395866983748225937565226607594", "287725367748858497641260553031501012666", "276576309933893761289846244921743107883", "152922577545610054467656687284007472864", "304295685645017222468866694584391935067", "32260036647202101542321266565207101459", "195062101594314683239219202772270039101", "140943815529429886940162158830286155510", "332603156978438045215459941919583329411", "390938992300505522195875478186405772", "209092327733482572776398202651444387212", "240050482495480845480262458032094524268", "68314242089519690823758425391443762558", "314957757806087263563056318967461454051", "286660203041770791370329292598644301060", "183658112776456884982317791669428260512", "245274500916817765685026299223726931501", "239216014942955512543650145673427277677", "171190651436066523382397299537867725127", "193361253108039010474392589263493625407", "44259014220124156151158169539784005727", "83615662073872901412605072790669479592", "332603156978438045215459941919583329411", "390938992300505522195875478186405772", "209092327733482572776398202651444387212", "1007792411899903657847015103372108454", "215784879440283593456859045336608473736", "265917009288791384330916886080142152618"], "threshold":0.9}, "id":"ASB-A-447536200-ebcd4771", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_discovery.cc"}}, {"deprecated":false, "digest":{"function_hash":"16144016054025343443327941460178366551", "length":513}, "id":"ASB-A-447536200-f6b407f1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/5288e3e85ba98e8ef6b91f287e1aa18f1bb28ac5", "target":{"file":"system/stack/sdp/sdp_utils.cc", "function":"sdpu_get_attrib_seq_len"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-06-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/packages/modules/Bluetooth/+/94566a29d020042ec4b423119f4d019d958b1aaf"}]}