{"id":"ASB-A-451602444", "published":"2026-11-01T00:00:00Z", "modified":"2026-11-05T16:32:28.703711716Z", "aliases":["CVE-2026-49924", "A-451602444"], "details":"In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-qpr2-next:0"}, {"fixed":"17-qpr2-next:2026-11-01"}]}], "versions":["17-qpr2-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb", "https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b", "https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"103018159512582308872258870356973652294", "length":4451}, "id":"ASB-A-451602444-0b227957", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java", "function":"testShortcutInfoMissingMandatoryFields"}}, {"deprecated":false, "digest":{"function_hash":"28750293430185058674802037971294379389", "length":932}, "id":"ASB-A-451602444-106a89bb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"function_hash":"114175057358879051190754868453971055375", "length":1044}, "id":"ASB-A-451602444-10d20deb", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java", "function":"ShortcutInfo"}}, {"deprecated":false, "digest":{"function_hash":"228953785868648991940060316848552532689", "length":1023}, "id":"ASB-A-451602444-10fbe25c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"addDynamicShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"186036941398439304080636130797669982314", "length":1722}, "id":"ASB-A-451602444-111eb0f4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateShortcuts"}}, {"deprecated":false, "digest":{"line_hashes":["97091192253155090159680690690253751681", "287521650325813515300594181366167863772", "193132984190381195312198466348957792770", "177481907760786459296346074876088483190"], "threshold":0.9}, "id":"ASB-A-451602444-1aab7b0e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"}}, {"deprecated":false, "digest":{"function_hash":"28750293430185058674802037971294379389", "length":932}, "id":"ASB-A-451602444-24437df1", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"function_hash":"330490457430214538118530996202957464749", "length":391}, "id":"ASB-A-451602444-263fcf80", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"validateShortcutSize"}}, {"deprecated":false, "digest":{"line_hashes":["336916740595853484794434492210072219840", "21594790408101240774495751146134241496", "128284451650090394194218246261020629737", "299357168606543631513449318544128626148", "323361789254308862404973638443262443473", "267946729309153649786716065316753413522", "336421579970259556127966568279106477320", "256175067828422207185479545689024785568", "272775078542805382455308614733401320132", "102792364210649161439142880292239661121", "182876723559962202617446026477368357808", "124984314299000142035825172815742487109", "187686037100948270343813786846529257275", "154879719381060605120578332303457577267", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "154879719381060605120578332303457577267", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "42878899071815562444310277103980723863", "154879719381060605120578332303457577267", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "65120479012864077420843313853585103656", "51946388225474194777575662700645753175", "197315576188323493713262946785415900653", "257327764504468156481512776832539524498"], "threshold":0.9}, "id":"ASB-A-451602444-2ffbf0e6", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}, {"deprecated":false, "digest":{"line_hashes":["237901262931818598654165269404324731276", "188665387038877244831902310914647169529", "293030020031976047340834094438576543426", "174068398987877512796358893514460170855", "295437594364688430501389381974127258714", "155544016385942242631721087576116245716", "20666050734034983287765684298196125765", "37990182455935330603233466065693768892", "235044486346499461438481269355907735371", "45126384062079443228524172241608301811", "96201268035272855790580296819035371538", "327861511168087302278812803253482291792", "70953044295502323201936215352972950723", "144763058216460005334686430221170381371", "33620401118033557648716849166454018115", "121027698625792230510042634182204020286", "68729634454569226571668511358280742495", "260507672820537349360996701794639939462", "329685979369148743237431526927675348784"], "threshold":0.9}, "id":"ASB-A-451602444-32ec80ea", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java"}}, {"deprecated":false, "digest":{"function_hash":"339601222863008298004896354620578186100", "length":1004}, "id":"ASB-A-451602444-36da22de", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"addDynamicShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"71412220942630048063950836074130040710", "length":1703}, "id":"ASB-A-451602444-41e8c656", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"227901665204587025000686993088593042017", "length":260}, "id":"ASB-A-451602444-5ac5a843", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"validateShortcutSizes"}}, {"deprecated":false, "digest":{"function_hash":"94567466273624967033616009761319529129", "length":1262}, "id":"ASB-A-451602444-72fbba4e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"setDynamicShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"270393854182748939625158789241805271849", "length":953}, "id":"ASB-A-451602444-7c89d3bf", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"function_hash":"94567466273624967033616009761319529129", "length":1262}, "id":"ASB-A-451602444-8b89269a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"setDynamicShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"71412220942630048063950836074130040710", "length":1703}, "id":"ASB-A-451602444-a09a6fe9", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2620c90391264a381ba62166943fc82749f0f5cb", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"157646904884070008700377512924801074702", "length":143}, "id":"ASB-A-451602444-b379b8e2", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"validateShortcutSize"}}, {"deprecated":false, "digest":{"function_hash":"168938080459532994748353839331824475494", "length":1281}, "id":"ASB-A-451602444-cd9110b7", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"setDynamicShortcuts"}}, {"deprecated":false, "digest":{"line_hashes":["100618827025222456214751250299302262147", "286530393883377075119530082321081462879", "133588259433069124176881219414664279811", "159054121081670191455971045531408269899", "285409131900921830757293120523161888598", "157039079928944337592054572547956496949", "22738083221792164449155068249630837209", "34811939372867685117369411304260014850", "323361789254308862404973638443262443473", "267946729309153649786716065316753413522", "336421579970259556127966568279106477320", "49379818860543610095124811669222887346", "286690564095318448724667662454797823606", "186203593297633018793551255909599452045", "10928554456528628724849569667322868797", "2718798138870330089531583893679522253", "21220389763846704822803287709106205400", "182876723559962202617446026477368357808", "124984314299000142035825172815742487109", "187686037100948270343813786846529257275", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "255520439221415030304095898816845586601", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "42878899071815562444310277103980723863", "321929901381648741112357344339524583280", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "88335566478888113100730872026267879093", "51946388225474194777575662700645753175", "197315576188323493713262946785415900653", "257327764504468156481512776832539524498", "18290083798357938132127413292799758667"], "threshold":0.9}, "id":"ASB-A-451602444-f0c8fb5d", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}, {"deprecated":false, "digest":{"function_hash":"339601222863008298004896354620578186100", "length":1004}, "id":"ASB-A-451602444-f341c015", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/ab0a589a99bb3c45ad5d61753d5a8c7411197a5d", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"addDynamicShortcuts"}}, {"deprecated":false, "digest":{"line_hashes":["44405926164414503192084927431512153483", "73202613135253157574059196717318340133", "122167814141206288150958299547817999390", "176928125621801936187774279080062910073", "322599985930554494454927287007178773133", "168994455637200040229000210232617296035", "53266723288218393473645268090686492284", "137927480048053744885256671744474823113", "105688116268553433994864201142467111117", "309285280475492546658054702865686837097", "39514571796303988645577690689526005488", "181552557333642009193007209191113011976", "200230581385119980691022524891581658190", "24878551406797363143072882735845173059", "9704609004820645892396460101806803745", "49693357618112692414869492575969841541", "105427887079565036822247400785116675653", "104286463096465087049312105096850732715", "185461472639915053459245035017216456300", "64023080197095620882668474144496717940", "272775078542805382455308614733401320132", "102792364210649161439142880292239661121", "63141562171763322478800604793352934238", "50998681473702837697825569607044621531", "66544120841341846504531158514793645211", "68638600120929848654051351125053166048", "225841469021538359120828311401160908345", "193556402113540194802929281064100945689", "81263628489069249796488531101893729361", "185461472639915053459245035017216456300", "91854003919610908140064292593648277183", "139141714570976558405613396746328921034", "7837566960675798085608326395255348182", "148582332128900279170251298737550662511", "2298346726206255872767168123200929481", "245207774769982457103116805732430923745", "72248465885943195943265694122030866987", "62743994008029875967557052228074179800", "176496848323231487834229061326242633330", "60650917780212746428832255148675169484", "310828251791335430773171425387740346847", "332253565430931152421723757225087732412", "194993172026741416427082180164648584752", "194829885017046164417090838433564128606", "66601450387102351477680977223157805803", "187686037100948270343813786846529257275", "194744495858166621079695193580827518066", "182613337507084301170034882134267966999", "313819311837287173201563004960537993486", "229846811245001283162204352868400334425", "194744495858166621079695193580827518066", "182613337507084301170034882134267966999", "313819311837287173201563004960537993486", "208825130403199421625512660796325659286", "194744495858166621079695193580827518066", "182613337507084301170034882134267966999", "313819311837287173201563004960537993486", "229846811245001283162204352868400334425", "72317996232012219745986339676090739942", "152059497658556795823540810024303095395", "197882789744934589903073205891598759015", "254530068836766894850300107498387948954"], "threshold":0.9}, "id":"ASB-A-451602444-ff49ef74", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/2f788c1a8e3f070f65299b41c6ba9e08c844901b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-11-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"318983710540196843273684549113788618325", "length":1209}, "id":"ASB-A-451602444-16ecc483", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"setDynamicShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"34293032210490228558487340659867651131", "length":951}, "id":"ASB-A-451602444-27d79310", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"addDynamicShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"103018159512582308872258870356973652294", "length":4451}, "id":"ASB-A-451602444-2f4662c4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java", "function":"testShortcutInfoMissingMandatoryFields"}}, {"deprecated":false, "digest":{"line_hashes":["100618827025222456214751250299302262147", "286530393883377075119530082321081462879", "133588259433069124176881219414664279811", "159054121081670191455971045531408269899", "285409131900921830757293120523161888598", "157039079928944337592054572547956496949", "22738083221792164449155068249630837209", "34811939372867685117369411304260014850", "323361789254308862404973638443262443473", "312829556133467067674456375116940128058", "330115838233315093872204878226476076920", "49379818860543610095124811669222887346", "286690564095318448724667662454797823606", "186203593297633018793551255909599452045", "10928554456528628724849569667322868797", "2718798138870330089531583893679522253", "21220389763846704822803287709106205400", "182876723559962202617446026477368357808", "124984314299000142035825172815742487109", "187686037100948270343813786846529257275", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "255520439221415030304095898816845586601", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "42878899071815562444310277103980723863", "321929901381648741112357344339524583280", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "88335566478888113100730872026267879093", "51946388225474194777575662700645753175", "183373815776437101437553035022405862300", "325515252994056304881639932539807854245", "222405467365552367942807604002764112303"], "threshold":0.9}, "id":"ASB-A-451602444-45d1869f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}, {"deprecated":false, "digest":{"function_hash":"71412220942630048063950836074130040710", "length":1703}, "id":"ASB-A-451602444-8ba54708", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateShortcuts"}}, {"deprecated":false, "digest":{"line_hashes":["97091192253155090159680690690253751681", "287521650325813515300594181366167863772", "193132984190381195312198466348957792770", "177481907760786459296346074876088483190"], "threshold":0.9}, "id":"ASB-A-451602444-c90b917e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"}}, {"deprecated":false, "digest":{"function_hash":"114175057358879051190754868453971055375", "length":1044}, "id":"ASB-A-451602444-d7298c87", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java", "function":"ShortcutInfo"}}, {"deprecated":false, "digest":{"function_hash":"171965400896051859916858482205845146818", "length":885}, "id":"ASB-A-451602444-ee8bc1e4", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"line_hashes":["237901262931818598654165269404324731276", "188665387038877244831902310914647169529", "293030020031976047340834094438576543426", "174068398987877512796358893514460170855", "295437594364688430501389381974127258714", "155544016385942242631721087576116245716", "20666050734034983287765684298196125765", "37990182455935330603233466065693768892", "235044486346499461438481269355907735371", "45126384062079443228524172241608301811", "96201268035272855790580296819035371538", "327861511168087302278812803253482291792", "70953044295502323201936215352972950723", "144763058216460005334686430221170381371", "33620401118033557648716849166454018115", "100603917343991467486286750332286447268", "111922013453599462532259127514077874744", "228469783096861006051920247900687388770"], "threshold":0.9}, "id":"ASB-A-451602444-f7ad9a39", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/08c287c27f6eb1c29dc7afdedb2e5978f0ac9540", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-11-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"71412220942630048063950836074130040710", "length":1703}, "id":"ASB-A-451602444-0e5a8a60", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateShortcuts"}}, {"deprecated":false, "digest":{"line_hashes":["97091192253155090159680690690253751681", "287521650325813515300594181366167863772", "193132984190381195312198466348957792770", "177481907760786459296346074876088483190"], "threshold":0.9}, "id":"ASB-A-451602444-3de55d2c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"}}, {"deprecated":false, "digest":{"function_hash":"103018159512582308872258870356973652294", "length":4451}, "id":"ASB-A-451602444-54a1b961", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java", "function":"testShortcutInfoMissingMandatoryFields"}}, {"deprecated":false, "digest":{"function_hash":"171965400896051859916858482205845146818", "length":885}, "id":"ASB-A-451602444-5d05306c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"function_hash":"318983710540196843273684549113788618325", "length":1209}, "id":"ASB-A-451602444-72a6b198", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"setDynamicShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"114175057358879051190754868453971055375", "length":1044}, "id":"ASB-A-451602444-8689c631", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java", "function":"ShortcutInfo"}}, {"deprecated":false, "digest":{"line_hashes":["237901262931818598654165269404324731276", "188665387038877244831902310914647169529", "293030020031976047340834094438576543426", "174068398987877512796358893514460170855", "295437594364688430501389381974127258714", "155544016385942242631721087576116245716", "20666050734034983287765684298196125765", "37990182455935330603233466065693768892", "235044486346499461438481269355907735371", "45126384062079443228524172241608301811", "96201268035272855790580296819035371538", "327861511168087302278812803253482291792", "70953044295502323201936215352972950723", "144763058216460005334686430221170381371", "33620401118033557648716849166454018115", "100603917343991467486286750332286447268", "111922013453599462532259127514077874744", "228469783096861006051920247900687388770"], "threshold":0.9}, "id":"ASB-A-451602444-c480fe62", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java"}}, {"deprecated":false, "digest":{"line_hashes":["100618827025222456214751250299302262147", "286530393883377075119530082321081462879", "133588259433069124176881219414664279811", "159054121081670191455971045531408269899", "285409131900921830757293120523161888598", "157039079928944337592054572547956496949", "22738083221792164449155068249630837209", "34811939372867685117369411304260014850", "323361789254308862404973638443262443473", "267946729309153649786716065316753413522", "336421579970259556127966568279106477320", "49379818860543610095124811669222887346", "286690564095318448724667662454797823606", "186203593297633018793551255909599452045", "10928554456528628724849569667322868797", "2718798138870330089531583893679522253", "21220389763846704822803287709106205400", "182876723559962202617446026477368357808", "124984314299000142035825172815742487109", "187686037100948270343813786846529257275", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "255520439221415030304095898816845586601", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "42878899071815562444310277103980723863", "321929901381648741112357344339524583280", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "88335566478888113100730872026267879093", "51946388225474194777575662700645753175", "183373815776437101437553035022405862300", "325515252994056304881639932539807854245", "222405467365552367942807604002764112303"], "threshold":0.9}, "id":"ASB-A-451602444-dce5758c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}, {"deprecated":false, "digest":{"function_hash":"34293032210490228558487340659867651131", "length":951}, "id":"ASB-A-451602444-fb886282", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/1ec9aca7bdd927b34bf1a5f56def74f08175c2ce", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"addDynamicShortcuts"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-11-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["100618827025222456214751250299302262147", "286530393883377075119530082321081462879", "133588259433069124176881219414664279811", "159054121081670191455971045531408269899", "285409131900921830757293120523161888598", "157039079928944337592054572547956496949", "22738083221792164449155068249630837209", "34811939372867685117369411304260014850", "323361789254308862404973638443262443473", "267946729309153649786716065316753413522", "336421579970259556127966568279106477320", "49379818860543610095124811669222887346", "286690564095318448724667662454797823606", "186203593297633018793551255909599452045", "10928554456528628724849569667322868797", "2718798138870330089531583893679522253", "21220389763846704822803287709106205400", "182876723559962202617446026477368357808", "124984314299000142035825172815742487109", "187686037100948270343813786846529257275", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "255520439221415030304095898816845586601", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "42878899071815562444310277103980723863", "321929901381648741112357344339524583280", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "88335566478888113100730872026267879093", "51946388225474194777575662700645753175", "183373815776437101437553035022405862300", "325515252994056304881639932539807854245", "222405467365552367942807604002764112303"], "threshold":0.9}, "id":"ASB-A-451602444-0c743c8c", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}, {"deprecated":false, "digest":{"function_hash":"114175057358879051190754868453971055375", "length":1044}, "id":"ASB-A-451602444-0e6e227f", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java", "function":"ShortcutInfo"}}, {"deprecated":false, "digest":{"function_hash":"103018159512582308872258870356973652294", "length":4451}, "id":"ASB-A-451602444-18bfda5b", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java", "function":"testShortcutInfoMissingMandatoryFields"}}, {"deprecated":false, "digest":{"function_hash":"71412220942630048063950836074130040710", "length":1703}, "id":"ASB-A-451602444-3402ed34", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateShortcuts"}}, {"deprecated":false, "digest":{"line_hashes":["237901262931818598654165269404324731276", "188665387038877244831902310914647169529", "293030020031976047340834094438576543426", "174068398987877512796358893514460170855", "295437594364688430501389381974127258714", "155544016385942242631721087576116245716", "20666050734034983287765684298196125765", "37990182455935330603233466065693768892", "235044486346499461438481269355907735371", "45126384062079443228524172241608301811", "96201268035272855790580296819035371538", "327861511168087302278812803253482291792", "70953044295502323201936215352972950723", "144763058216460005334686430221170381371", "33620401118033557648716849166454018115", "100603917343991467486286750332286447268", "111922013453599462532259127514077874744", "228469783096861006051920247900687388770"], "threshold":0.9}, "id":"ASB-A-451602444-9f3e8680", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java"}}, {"deprecated":false, "digest":{"line_hashes":["97091192253155090159680690690253751681", "287521650325813515300594181366167863772", "193132984190381195312198466348957792770", "177481907760786459296346074876088483190"], "threshold":0.9}, "id":"ASB-A-451602444-bc1bfed7", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"}}, {"deprecated":false, "digest":{"function_hash":"171965400896051859916858482205845146818", "length":885}, "id":"ASB-A-451602444-c3b8813a", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"function_hash":"34293032210490228558487340659867651131", "length":951}, "id":"ASB-A-451602444-d16f53ab", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"addDynamicShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"318983710540196843273684549113788618325", "length":1209}, "id":"ASB-A-451602444-d27e1993", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/0b841811c4feb80754493ae3d86f53999222c61b", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"setDynamicShortcuts"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17:0"}, {"fixed":"17:2026-11-01"}]}], "versions":["17"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["100618827025222456214751250299302262147", "286530393883377075119530082321081462879", "133588259433069124176881219414664279811", "159054121081670191455971045531408269899", "285409131900921830757293120523161888598", "157039079928944337592054572547956496949", "22738083221792164449155068249630837209", "34811939372867685117369411304260014850", "323361789254308862404973638443262443473", "267946729309153649786716065316753413522", "336421579970259556127966568279106477320", "49379818860543610095124811669222887346", "286690564095318448724667662454797823606", "186203593297633018793551255909599452045", "10928554456528628724849569667322868797", "2718798138870330089531583893679522253", "21220389763846704822803287709106205400", "182876723559962202617446026477368357808", "124984314299000142035825172815742487109", "187686037100948270343813786846529257275", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "255520439221415030304095898816845586601", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "42878899071815562444310277103980723863", "321929901381648741112357344339524583280", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "88335566478888113100730872026267879093", "51946388225474194777575662700645753175", "197315576188323493713262946785415900653", "257327764504468156481512776832539524498", "18290083798357938132127413292799758667"], "threshold":0.9}, "id":"ASB-A-451602444-08c13928", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}, {"deprecated":false, "digest":{"line_hashes":["97091192253155090159680690690253751681", "287521650325813515300594181366167863772", "193132984190381195312198466348957792770", "177481907760786459296346074876088483190"], "threshold":0.9}, "id":"ASB-A-451602444-490ae99a", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"}}, {"deprecated":false, "digest":{"function_hash":"103018159512582308872258870356973652294", "length":4451}, "id":"ASB-A-451602444-4964a96e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java", "function":"testShortcutInfoMissingMandatoryFields"}}, {"deprecated":false, "digest":{"function_hash":"339601222863008298004896354620578186100", "length":1004}, "id":"ASB-A-451602444-964d36c3", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"addDynamicShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"114175057358879051190754868453971055375", "length":1044}, "id":"ASB-A-451602444-b6c0cfa0", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java", "function":"ShortcutInfo"}}, {"deprecated":false, "digest":{"function_hash":"94567466273624967033616009761319529129", "length":1262}, "id":"ASB-A-451602444-b9b96a7e", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"setDynamicShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"28750293430185058674802037971294379389", "length":932}, "id":"ASB-A-451602444-d7da69cd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"line_hashes":["237901262931818598654165269404324731276", "188665387038877244831902310914647169529", "293030020031976047340834094438576543426", "174068398987877512796358893514460170855", "295437594364688430501389381974127258714", "155544016385942242631721087576116245716", "20666050734034983287765684298196125765", "37990182455935330603233466065693768892", "235044486346499461438481269355907735371", "45126384062079443228524172241608301811", "96201268035272855790580296819035371538", "327861511168087302278812803253482291792", "70953044295502323201936215352972950723", "144763058216460005334686430221170381371", "33620401118033557648716849166454018115", "100603917343991467486286750332286447268", "111922013453599462532259127514077874744", "228469783096861006051920247900687388770"], "threshold":0.9}, "id":"ASB-A-451602444-e6299949", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java"}}, {"deprecated":false, "digest":{"function_hash":"71412220942630048063950836074130040710", "length":1703}, "id":"ASB-A-451602444-fcdbc3cd", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7b9e776e3d6a560b3047df95286e1232716aef27", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateShortcuts"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-11-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5"], "severity":"High", "spl":"2026-11-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["100618827025222456214751250299302262147", "286530393883377075119530082321081462879", "133588259433069124176881219414664279811", "159054121081670191455971045531408269899", "40250614945690976328714534111887374960", "157039079928944337592054572547956496949", "22738083221792164449155068249630837209", "34811939372867685117369411304260014850", "323361789254308862404973638443262443473", "322835205800953069906274331529097190221", "131858856584697455465792215535198040585", "49379818860543610095124811669222887346", "286690564095318448724667662454797823606", "186203593297633018793551255909599452045", "10928554456528628724849569667322868797", "2718798138870330089531583893679522253", "21220389763846704822803287709106205400", "182876723559962202617446026477368357808", "124984314299000142035825172815742487109", "187686037100948270343813786846529257275", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "255520439221415030304095898816845586601", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "42878899071815562444310277103980723863", "321929901381648741112357344339524583280", "220009168948288049530746349607475027773", "283841965564621843934980190153004253387", "154274304223043419759079054996356482577", "88335566478888113100730872026267879093", "51946388225474194777575662700645753175", "183373815776437101437553035022405862300", "325515252994056304881639932539807854245", "222405467365552367942807604002764112303"], "threshold":0.9}, "id":"ASB-A-451602444-31369226", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java"}}, {"deprecated":false, "digest":{"line_hashes":["237901262931818598654165269404324731276", "188665387038877244831902310914647169529", "293030020031976047340834094438576543426", "174068398987877512796358893514460170855", "295437594364688430501389381974127258714", "155544016385942242631721087576116245716", "20666050734034983287765684298196125765", "37990182455935330603233466065693768892", "235044486346499461438481269355907735371", "45126384062079443228524172241608301811", "96201268035272855790580296819035371538", "327861511168087302278812803253482291792", "70953044295502323201936215352972950723", "144763058216460005334686430221170381371", "33620401118033557648716849166454018115", "100603917343991467486286750332286447268", "111922013453599462532259127514077874744", "228469783096861006051920247900687388770"], "threshold":0.9}, "id":"ASB-A-451602444-39dd9d2e", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java"}}, {"deprecated":false, "digest":{"line_hashes":["97091192253155090159680690690253751681", "287521650325813515300594181366167863772", "193132984190381195312198466348957792770", "177481907760786459296346074876088483190"], "threshold":0.9}, "id":"ASB-A-451602444-3aebe498", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java"}}, {"deprecated":false, "digest":{"function_hash":"114175057358879051190754868453971055375", "length":1044}, "id":"ASB-A-451602444-796164ab", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5", "target":{"file":"core/java/android/content/pm/ShortcutInfo.java", "function":"ShortcutInfo"}}, {"deprecated":false, "digest":{"function_hash":"321829752434666575755124052290594794159", "length":1202}, "id":"ASB-A-451602444-9342d4d6", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"setDynamicShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"72053831430762407432456560612262857770", "length":878}, "id":"ASB-A-451602444-e7d45f14", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"pushDynamicShortcut"}}, {"deprecated":false, "digest":{"function_hash":"103018159512582308872258870356973652294", "length":4451}, "id":"ASB-A-451602444-ecb20d01", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5", "target":{"file":"services/tests/servicestests/src/com/android/server/pm/ShortcutManagerTest2.java", "function":"testShortcutInfoMissingMandatoryFields"}}, {"deprecated":false, "digest":{"function_hash":"32989098233992377005863261440417470795", "length":1696}, "id":"ASB-A-451602444-f87dfa8d", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"updateShortcuts"}}, {"deprecated":false, "digest":{"function_hash":"78155714901215305587265594459312803586", "length":944}, "id":"ASB-A-451602444-ffbe7625", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/9e978241f930940be654d3602ada4089245b09c5", "target":{"file":"services/core/java/com/android/server/pm/ShortcutService.java", "function":"addDynamicShortcuts"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-11-01"}]}