{"id":"ASB-A-480975165", "published":"2026-09-01T00:00:00Z", "modified":"2026-09-10T15:43:18.983809180Z", "aliases":["CVE-2026-28596", "A-480975165"], "details":"In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"17-next:0"}, {"fixed":"17-next:2026-09-01"}]}], "versions":["17-next"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/d3a1cc8820b17b04723df14b9e5df02473f440d6"], "severity":"High", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["20982447598958631382731828939379110873", "100646987225916062867589442827492674535", "299840733928824278291399390362936302801", "168531452746523633564007518218141505047"], "threshold":0.9}, "id":"ASB-A-480975165-2b3cdc80", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d3a1cc8820b17b04723df14b9e5df02473f440d6", "target":{"file":"services/core/java/com/android/server/app/GameManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"98306407619870254031970706705374646960", "length":1636}, "id":"ASB-A-480975165-2f658f72", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/d3a1cc8820b17b04723df14b9e5df02473f440d6", "target":{"file":"services/core/java/com/android/server/app/GameManagerService.java", "function":"parseInterventionFromXml"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"15:0"}, {"fixed":"15:2026-09-01"}]}], "versions":["15"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/81c0a9160662f5f03a3a81236611449b6b038c90"], "severity":"High", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"98306407619870254031970706705374646960", "length":1636}, "id":"ASB-A-480975165-a36a5b12", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/81c0a9160662f5f03a3a81236611449b6b038c90", "target":{"file":"services/core/java/com/android/server/app/GameManagerService.java", "function":"parseInterventionFromXml"}}, {"deprecated":false, "digest":{"line_hashes":["20982447598958631382731828939379110873", "100646987225916062867589442827492674535", "299840733928824278291399390362936302801", "168531452746523633564007518218141505047"], "threshold":0.9}, "id":"ASB-A-480975165-f949e285", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/81c0a9160662f5f03a3a81236611449b6b038c90", "target":{"file":"services/core/java/com/android/server/app/GameManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16:0"}, {"fixed":"16:2026-09-01"}]}], "versions":["16"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/49a60b644920cdf7b513b8fffe3904f1b154f916"], "severity":"High", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["20982447598958631382731828939379110873", "100646987225916062867589442827492674535", "299840733928824278291399390362936302801", "168531452746523633564007518218141505047"], "threshold":0.9}, "id":"ASB-A-480975165-17b1c27f", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/49a60b644920cdf7b513b8fffe3904f1b154f916", "target":{"file":"services/core/java/com/android/server/app/GameManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"98306407619870254031970706705374646960", "length":1636}, "id":"ASB-A-480975165-ecf2dc0c", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/49a60b644920cdf7b513b8fffe3904f1b154f916", "target":{"file":"services/core/java/com/android/server/app/GameManagerService.java", "function":"parseInterventionFromXml"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"16-qpr2:0"}, {"fixed":"16-qpr2:2026-09-01"}]}], "versions":["16-qpr2"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/7531bc2726579c3180447af102d1e4217bdcc41b"], "severity":"High", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"function_hash":"98306407619870254031970706705374646960", "length":1636}, "id":"ASB-A-480975165-9d1ac5ce", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7531bc2726579c3180447af102d1e4217bdcc41b", "target":{"file":"services/core/java/com/android/server/app/GameManagerService.java", "function":"parseInterventionFromXml"}}, {"deprecated":false, "digest":{"line_hashes":["20982447598958631382731828939379110873", "100646987225916062867589442827492674535", "299840733928824278291399390362936302801", "168531452746523633564007518218141505047"], "threshold":0.9}, "id":"ASB-A-480975165-ca6670ba", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/7531bc2726579c3180447af102d1e4217bdcc41b", "target":{"file":"services/core/java/com/android/server/app/GameManagerService.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"14:0"}, {"fixed":"14:2026-09-01"}]}], "versions":["14"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/98f4d6d74c24280ff10125ad4ca34dd118f7f697"], "severity":"High", "spl":"2026-09-01", "types":["DoS"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["20982447598958631382731828939379110873", "100646987225916062867589442827492674535", "299840733928824278291399390362936302801", "168531452746523633564007518218141505047"], "threshold":0.9}, "id":"ASB-A-480975165-10d1b8b2", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/98f4d6d74c24280ff10125ad4ca34dd118f7f697", "target":{"file":"services/core/java/com/android/server/app/GameManagerService.java"}}, {"deprecated":false, "digest":{"function_hash":"98306407619870254031970706705374646960", "length":1636}, "id":"ASB-A-480975165-7289e9bc", "signature_type":"Function", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/98f4d6d74c24280ff10125ad4ca34dd118f7f697", "target":{"file":"services/core/java/com/android/server/app/GameManagerService.java", "function":"parseInterventionFromXml"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2026-09-01"}]}